[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwOTeG5HtT0QTGcP4O4xiGreKml0N1zPlV7d5vxW0In8":3,"g5a-ex:elastic\u002Felastic_cloud_enterprise@*":140,"g5a-family:elastic\u002Felastic_cloud_enterprise":142},{"success":4,"data":5},true,{"product":6,"versions":59,"topVulnerabilitiesByEpss":81,"kevVulnerabilities":117,"seoMetadata":118,"meta":137},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":58},"elastic","elastic_cloud_enterprise",21,6,0,"2023-10-26",[14,17,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"1.0.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"1.0.1",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"1.0.2",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.0",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.1",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.2",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.3",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.4",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.5",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.0",{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.1",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.0",{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.1",{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.0",{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.1",{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.2",{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.3",{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},"2.3.0",{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},"2.3.1",{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},"3.4.0",{"version":56,"cve_count":57,"kev_count":11,"has_kev":16},"3.6.0",1,"Elastic Cloud Enterprise by Elastic is a technology product with 21 tracked versions and 6 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},{"version":56,"cve_count":57,"kev_count":11,"has_kev":16},[82,89,96,102,108,113],{"cveId":83,"description":84,"publishedDate":12,"cvssScore":85,"cvssVersion":86,"severity":87,"isKev":16,"epssScore":88},"CVE-2023-31418","An issue has been identified with how Elasticsearch handled incoming requests on the HTTP layer. An unauthenticated user could force an Elasticsearch node to exit with an OutOfMemory error by sending a moderate number of malformed HTTP requests. The issue was identified by Elastic Engineering and we have no indication that the issue is known or that it is being exploited in the wild.",7.5,"v3.1","High",0.0205,{"cveId":90,"description":91,"publishedDate":92,"cvssScore":93,"cvssVersion":86,"severity":94,"isKev":16,"epssScore":95},"CVE-2018-3829","In Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 it was discovered that a user could scale out allocators on new hosts with an invalid roles token. An attacker with access to the previous runner ID and IP address of the coordinator-host could add a allocator to an existing ECE install to gain access to other clusters data.","2018-09-19",5.3,"Medium",0.00896,{"cveId":97,"description":98,"publishedDate":99,"cvssScore":100,"cvssVersion":86,"severity":94,"isKev":16,"epssScore":101},"CVE-2022-23715","A flaw was discovered in ECE before 3.4.0 that might lead to the disclosure of sensitive information such as user passwords and Elasticsearch keystore settings values in logs such as the audit log or deployment logs in the Logging and Monitoring cluster. The affected APIs are PATCH \u002Fapi\u002Fv1\u002Fuser and PATCH \u002Fdeployments\u002F{deployment_id}\u002Felasticsearch\u002F{ref_id}\u002Fkeystore","2022-08-25",6.5,0.00795,{"cveId":103,"description":104,"publishedDate":92,"cvssScore":105,"cvssVersion":106,"severity":94,"isKev":16,"epssScore":107},"CVE-2018-3825","In Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 a default master encryption key is used in the process of granting ZooKeeper access to Elasticsearch clusters. Unless explicitly overwritten, this master key is predictable across all ECE deployments. If an attacker can connect to ZooKeeper directly they would be able to access configuration information of other tenants if their cluster ID is known.",5.9,"v3.0",0.00653,{"cveId":109,"description":110,"publishedDate":111,"cvssScore":93,"cvssVersion":86,"severity":94,"isKev":16,"epssScore":112},"CVE-2022-23716","A flaw was discovered in ECE before 3.1.1 that could lead to the disclosure of the SAML signing private key used for the RBAC features, in deployment logs in the Logging and Monitoring cluster.","2022-09-28",0.0065,{"cveId":114,"description":115,"publishedDate":92,"cvssScore":85,"cvssVersion":106,"severity":87,"isKev":16,"epssScore":116},"CVE-2018-3828","Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 contain an information exposure vulnerability. It was discovered that certain exception conditions would result in encryption keys, passwords, and other security sensitive headers being leaked to the allocator logs. An attacker with access to the logging cluster may obtain leaked credentials and perform authenticated actions using these credentials.",0.00597,[],{"title":119,"metaDescription":120,"keywords":121,"structuredData":122},"Elastic Cloud Enterprise by Elastic - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Elastic Cloud Enterprise by Elastic covering 21 versions with 6 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Elastic Cloud Enterprise vulnerabilities, Elastic Cloud Enterprise security, Elastic Cloud Enterprise CVE, Elastic Elastic Cloud Enterprise, Elastic Cloud Enterprise threat intelligence, Elastic security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":123,"@type":124,"name":125,"description":120,"url":126,"manufacturer":127,"applicationCategory":131,"softwareVersion":132,"mainEntity":133},"https:\u002F\u002Fschema.org","SoftwareApplication","Elastic Cloud Enterprise","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Felastic\u002Felastic_cloud_enterprise",{"@type":128,"name":129,"url":130},"Organization","Elastic","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Felastic","Security Software","21 versions tracked",{"@type":134,"name":135,"description":136,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Elastic Cloud Enterprise Security Vulnerabilities","Security vulnerabilities affecting Elastic Cloud Enterprise by Elastic",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":138,"apiVersion":139},"2026-10-17T18:04:26.520Z","3.0",{"rows":141,"total":11,"capped":16,"failed":11},[],[]]