Elastic Elastic Cloud Enterprise

• CVE-2026-115713 High 7.5 Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Modification 0.2%
• CVE-2026-115712 Medium 4.3 Incorrect Authorization in Elastic Cloud Enterprise (ECE) Leading to Unauthorized Modification of Platform Settings 0.2%
• CVE-2026-115711 Medium 6.4 Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Credential Disclosure 0.2%
• CVE-2026-115709 High 8.2 Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Loss 0.3%
• CVE-2026-115708 High 7.2 Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Authentication Bypass 0.2%
• CVE-2026-115707 Medium 6.4 Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Privilege Escalation 0.1%
• CVE-2026-115706 Medium 6.8 Authorization Bypass Through User-Controlled Key in Elastic Cloud Enterprise (ECE) Leading to Privilege Escalation 0.2%
• CVE-2024-37282 High 8.1 It was identified that under certain specific preconditions, an API key that was originally created with a specific privileges could be subsequently used to create new API keys that have elevated priv 0.6%
• CVE-2022-23716 Medium 5.3 A flaw was discovered in ECE before 3.1.1 that could lead to the disclosure of the SAML signing private key used for the RBAC features, in deployment logs in the Logging and Monitoring cluster. 0.7%
• CVE-2022-23715 Unrated A flaw was discovered in ECE before 3.4.0 that might lead to the disclosure of sensitive information such as user passwords and Elasticsearch keystore settings values in logs such as the audit log or 0.8%