Opensearch Security

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-31141 May 08, 21:15 Maven MEDIUM PATCH This Month

OpenSearch is open-source software suite for search, analytics, and observability applications. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Authentication Bypass Opensearch Amazon Opensearch Security

NVD GitHub

CVSS 3.1

5.9

EPSS

0.5%

CVE-2023-25806 Mar 02, 04:15 Maven MEDIUM PATCH This Month

OpenSearch Security is a plugin for OpenSearch that offers encryption, authentication and authorization. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Opensearch Amazon Opensearch Security

NVD GitHub

CVSS 3.1

5.3

EPSS

0.3%

CVE-2023-31141 Maven

EPSS 0% CVSS 5.9

MEDIUM PATCH This Month

Authentication Bypass Opensearch Amazon +1

NVD GitHub

CVE-2023-25806 Maven

EPSS 0% CVSS 5.3

MEDIUM PATCH This Month

Information Disclosure Opensearch Amazon +1

NVD GitHub