# Elastic Elasticsearch


- [CVE-2015-1427](https://insights.sbomify.com/CVE-2015-1427/): Elasticsearch Groovy Scripting Engine Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2014-3120](https://insights.sbomify.com/CVE-2014-3120/): Elasticsearch Remote Code Execution (high 8.1, exploited in the wild)
- [CVE-2015-5377](https://insights.sbomify.com/CVE-2015-5377/): Code injection in n/a (critical 9.8)
- [CVE-2026-72649](https://insights.sbomify.com/CVE-2026-72649/): Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution (high 8.8)
- [CVE-2026-72642](https://insights.sbomify.com/CVE-2026-72642/): Use of Out-of-range Pointer Offset in the Elasticsearch Machine Learning Native Inference Process (high 8.8)
- [CVE-2020-7014](https://insights.sbomify.com/CVE-2020-7014/): Privilege Escalation Flaw in Elasticsearch (high 8.8)
- [CVE-2020-7009](https://insights.sbomify.com/CVE-2020-7009/): Improper Privilege Management in Elasticsearch (high 8.8)
- [CVE-2018-3831](https://insights.sbomify.com/CVE-2018-3831/): Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch (high 8.8)
- [CVE-2019-7611](https://insights.sbomify.com/CVE-2019-7611/): Improper Access Control in Elasticsearch (high 8.1)
- [CVE-2023-31418](https://insights.sbomify.com/CVE-2023-31418/): Elasticsearch uncontrolled resource consumption (high 7.5)
- [CVE-2022-23712](https://insights.sbomify.com/CVE-2022-23712/): Improper Check for Unusual or Exceptional Conditions in Elasticsearch (high 7.5)
- [CVE-2021-22146](https://insights.sbomify.com/CVE-2021-22146/): Information disclosure in n/a (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/products/elastic/elasticsearch/