Skip to main content

Opensearch

11 CVEs product

Monthly

CVE-2025-9624 Maven HIGH POC PATCH This Week

A vulnerability in OpenSearch allows attackers to cause Denial of Service (DoS) by submitting complex query_string inputs.0.0 and < 3.3.0 and OpenSearch < 2.19.4. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Opensearch
NVD GitHub
CVSS 4.0
8.3
EPSS
0.0%
CVE-2023-45807 Maven MEDIUM PATCH This Month

OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana following the license change in early 2021. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Elastic Information Disclosure Opensearch
NVD GitHub
CVSS 3.1
5.4
EPSS
0.4%
CVE-2023-31141 Maven MEDIUM PATCH This Month

OpenSearch is open-source software suite for search, analytics, and observability applications. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Authentication Bypass Opensearch Opensearch Security
NVD GitHub
CVSS 3.1
5.9
EPSS
0.5%
CVE-2023-25806 Maven MEDIUM PATCH This Month

OpenSearch Security is a plugin for OpenSearch that offers encryption, authentication and authorization. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Opensearch Opensearch Security
NVD GitHub
CVSS 3.1
5.3
EPSS
0.3%
CVE-2023-23933 MEDIUM This Month

OpenSearch Anomaly Detection identifies atypical data and receives automatic notifications. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Opensearch
NVD GitHub
CVSS 3.1
4.3
EPSS
0.5%
CVE-2023-23613 Maven MEDIUM PATCH This Month

OpenSearch is an open source distributed and RESTful search engine. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Opensearch
NVD GitHub
CVSS 3.1
6.5
EPSS
0.8%
CVE-2023-23612 Maven HIGH PATCH This Week

OpenSearch is an open source distributed and RESTful search engine. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Opensearch
NVD GitHub
CVSS 3.1
8.8
EPSS
0.8%
CVE-2022-41917 MEDIUM PATCH This Month

OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Java Elastic Opensearch
NVD GitHub
CVSS 3.1
4.3
EPSS
0.5%
CVE-2022-41918 Maven MEDIUM PATCH This Month

OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Elastic Opensearch
NVD GitHub
CVSS 3.1
6.3
EPSS
0.4%
CVE-2022-35980 Maven HIGH PATCH This Week

OpenSearch Security is a plugin for OpenSearch that offers encryption, authentication and authorization. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Elastic Opensearch
NVD GitHub
CVSS 3.1
7.5
EPSS
0.9%
CVE-2022-31115 Ruby HIGH POC PATCH This Week

opensearch-ruby is a community-driven, open source fork of elasticsearch-ruby. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Deserialization Elastic Opensearch
NVD GitHub
CVSS 3.1
8.8
EPSS
1.5%
EPSS 0% CVSS 8.3
HIGH POC PATCH This Week

A vulnerability in OpenSearch allows attackers to cause Denial of Service (DoS) by submitting complex query_string inputs.0.0 and < 3.3.0 and OpenSearch < 2.19.4. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Opensearch
NVD GitHub
EPSS 0% CVSS 5.4
MEDIUM PATCH This Month

OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana following the license change in early 2021. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Elastic Information Disclosure Opensearch
NVD GitHub
EPSS 0% CVSS 5.9
MEDIUM PATCH This Month

OpenSearch is open-source software suite for search, analytics, and observability applications. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Authentication Bypass Opensearch Opensearch Security
NVD GitHub
EPSS 0% CVSS 5.3
MEDIUM PATCH This Month

OpenSearch Security is a plugin for OpenSearch that offers encryption, authentication and authorization. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Opensearch Opensearch Security
NVD GitHub
EPSS 1% CVSS 4.3
MEDIUM This Month

OpenSearch Anomaly Detection identifies atypical data and receives automatic notifications. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Opensearch
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

OpenSearch is an open source distributed and RESTful search engine. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Opensearch
NVD GitHub
EPSS 1% CVSS 8.8
HIGH PATCH This Week

OpenSearch is an open source distributed and RESTful search engine. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Opensearch
NVD GitHub
EPSS 1% CVSS 4.3
MEDIUM PATCH This Month

OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Java Elastic +1
NVD GitHub
EPSS 0% CVSS 6.3
MEDIUM PATCH This Month

OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Elastic Opensearch
NVD GitHub
EPSS 1% CVSS 7.5
HIGH PATCH This Week

OpenSearch Security is a plugin for OpenSearch that offers encryption, authentication and authorization. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Elastic Opensearch
NVD GitHub
EPSS 2% CVSS 8.8
HIGH POC PATCH This Week

opensearch-ruby is a community-driven, open source fork of elasticsearch-ruby. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Deserialization Elastic Opensearch
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy