Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5DoS in zstd decompressionOpen the advisoryOct 22, 2026
- UnknownCVE-2026-84942 - Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch DashboardsCheck if you run itEPSS 0.54%Sep 9, 2026
- UnknownCVE-2026-83497 - OpenSearch SQL Plugin - Unrestricted Java Deserialization in Cursor PaginationCheck if you run itEPSS 0.96%Sep 9, 2026
- UnknownCVE-2026-75897 - Uncontrolled resource consumption in OpenSearch Dashboards capabilities routeCheck if you run itEPSS 0.72%Sep 9, 2026
- Medium6.5The OpenSearch logging provider, when configured with a URL that embeds credentials (for example ), wrote the full host URL — including the embedded credentials — into…Check if you run itEPSS 0.41%May 11, 2026
- High8.3A vulnerability in OpenSearch allows attackers to cause Denial of Service (DoS) by submitting complex query_string inputs.Check if you run itEPSS 0.73%Nov 25, 2025
- Medium4.9Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: OpenSearch Dashboards).Check if you run itEPSS 0.37%Oct 21, 2025
- High7.4OpenSearch Data Prepper as an open source data collector for observability data.Check if you run itEPSS 0.19%Oct 15, 2025
- Medium6.5OpenSearch StackOverflow vulnerabilityCheck this weekEPSS 61.07%Nov 30, 2023
- Medium5.7Incorrect Error Handling Allowed Partial File Reads Over REST APICheck if you run itEPSS 0.60%Nov 15, 2022
Sort
10 records