elastic elastic cloud enterprise

Name: elastic elastic cloud enterprise
Brand: elastic

productUS

cpe:2.3:a:elastic:elastic_cloud_enterprise:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical3high4medium0low

updated 2026-10-28

vulnerabilities (9)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-31418US	high7.5	2.05% (81st)	—	no fix	2023-10-26	2 versions
CVE-2018-3829US	medium5.3	0.90% (59th)	—	1.1.4	2018-09-19	< 1.1.4
CVE-2022-23715US	medium6.5	0.81% (57th)	—	3.4.0	2022-08-25	< 3.4.0
CVE-2025-37729US	high7.2	0.66% (52nd)	—	4.0.2	2025-10-13	2 versions
CVE-2018-3825US	medium5.9OT elevated	0.65% (51st)	—	1.1.4	2018-09-19	< 1.1.4
CVE-2022-23716US	medium5.3	0.65% (51st)	—	3.1.1	2022-09-28	< 3.1.1
CVE-2024-37282US	critical9.8	0.60% (49th)	—	3.7.2	2024-06-28	3.0.0 → 3.7.2
CVE-2018-3828US	high7.5	0.60% (48th)	—	1.1.4	2018-09-19	< 1.1.4
CVE-2025-37736US	—OT elevated	0.40% (34th)	—	4.0.3	2025-11-07	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-532Insertion of Sensitive Information into Log File3 CVEs
CWE-285Improper Authorization2 CVEs
CWE-1188Initialization of a Resource with an Insecure Default1 CVEs
CWE-1336Improper Neutralization of Special Elements Used in a Template Engine1 CVEs
CWE-290Authentication Bypass by Spoofing1 CVEs
CWE-321Use of Hard-coded Cryptographic Key1 CVEs
CWE-400Uncontrolled Resource Consumption1 CVEs
CWE-863Incorrect Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.