Opensearch (Amazon) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 103 known versions, newest CVE from 2025-11-25. Vendor: Amazon.
CVEs of Opensearch
- CVE-2025-9624 - CVSS 8.3 (high), 2025-11-25: A vulnerability in OpenSearch allows attackers to cause Denial of Service (DoS) by submitting complex query_string inputs. This issue affects all OpenSearch…
- CVE-2023-45807 - CVSS 5.4 (medium), 2023-10-16: OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana following the license change in early 2021. There is an issue with the…
- CVE-2023-31141 - CVSS 5.9 (medium), 2023-05-08: OpenSearch is open-source software suite for search, analytics, and observability applications. Prior to versions 1.3.10 and 2.7.0, there is an issue with the…
- CVE-2023-25806 - CVSS 5.3 (medium), 2023-03-02: OpenSearch Security is a plugin for OpenSearch that offers encryption, authentication and authorization. There is an observable discrepancy in the…
- CVE-2023-23933 - CVSS 5.7 (medium), 2023-02-03: OpenSearch Anomaly Detection identifies atypical data and receives automatic notifications. There is an issue with the application of document and field level…
- CVE-2023-23613 - CVSS 6.5 (medium), 2023-01-26: OpenSearch is an open source distributed and RESTful search engine. In affected versions there is an issue in the implementation of field-level security (FLS)…
- CVE-2023-23612 - CVSS 8.8 (high), 2023-01-26: OpenSearch is an open source distributed and RESTful search engine. OpenSearch uses JWTs to store role claims obtained from the Identity Provider (IdP) when…
- CVE-2022-41917 - CVSS 4.3 (medium), 2022-11-16: OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana. OpenSearch allows users to specify a local file when defining text analyzers…
- CVE-2022-41918 - CVSS 6.3 (medium), 2022-11-15: OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana. There is an issue with the implementation of fine-grained access control rules…
- CVE-2022-35980 - CVSS 7.5 (high), 2022-08-12: OpenSearch Security is a plugin for OpenSearch that offers encryption, authentication and authorization. Versions 2.0.0.0 and 2.1.0.0 of the security plugin…
- CVE-2022-31115 - CVSS 8.8 (high), 2022-06-30: opensearch-ruby is a community-driven, open source fork of elasticsearch-ruby. In versions prior to 2.0.1 the ruby `YAML.load` function was used instead of…
