elastic elastic cloud on kubernetes

Name: elastic elastic cloud on kubernetes
Brand: elastic

productUS

cpe:2.3:a:elastic:elastic_cloud_on_kubernetes:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

critical

by severity

0critical1high1medium0low

updated 2026-10-28

vulnerabilities (6)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-7010US	high7.5	1.44% (73rd)	—	1.1.0	2020-06-03	< 1.1.0
CVE-2023-31416US	medium5.3	0.43% (37th)	—	2.8	2023-10-26	< 2.8
CVE-2026-72648US	—	0.43% (37th)	—	3.5.0	2026-08-13	3.0.0 → 3.5.0
CVE-2026-72640US	—	0.38% (31st)	—	3.5.0	2026-08-13	< 3.5.0
CVE-2026-78600US	—	0.28% (21st)	—	3.5.0	2026-09-02	2.6.0 → 3.5.0
CVE-2026-78609US	—OT elevated	0.15% (4th)	—	3.5.0	2026-09-02	2.6.0 → 3.5.0

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-335Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)1 CVEs
CWE-441Unintended Proxy or Intermediary ('Confused Deputy')1 CVEs
CWE-459Incomplete Cleanup1 CVEs
CWE-526Cleartext Storage of Sensitive Information in an Environment Variable1 CVEs
CWE-863Incorrect Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.