What are the most common weakness types in opensearch-project org.opensearch.plugin:opensearch-security CVEs?

opensearch-project org.opensearch.plugin:opensearch-security's CVEs most often map to these CWE weakness types: CWE-612 (Improper Authorization of Index Containing Sensitive Information), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-208 (Observable Timing Discrepancy), CWE-281 (Improper Preservation of Permissions).

opensearch-project org.opensearch.plugin:opensearch-security Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: opensearch-project org.opensearch.plugin:opensearch-security vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

opensearch-project org.opensearch.plugin:opensearch-security Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

opensearch-project org.opensearch.plugin:opensearch-security has 7 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.5.

Severity and exploitation

How the CVSS severity of opensearch-project org.opensearch.plugin:opensearch-security's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High2

Medium5

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of opensearch-project org.opensearch.plugin:opensearch-security's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No opensearch-project org.opensearch.plugin:opensearch-security CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every opensearch-project org.opensearch.plugin:opensearch-security version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.3.82 CVEs
2.0.0 <= v < 2.5.02 CVEs
< 1.3.14.01 CVE
< 1.3.71 CVE
< 1.3.91 CVE
1.0.0 <= v < 1.3.10.01 CVE
2.0.0 <= v < 2.4.01 CVE
2.0.0 <= v < 2.6.01 CVE
2.0.0 <= v < 2.7.0.01 CVE
2.0.0.0 <= v < 2.11.0.01 CVE
2.0.0.0 <= v < 2.2.0.01 CVE

Fixed in

Common weakness types

The CWE weakness categories most often found in opensearch-project org.opensearch.plugin:opensearch-security CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many opensearch-project org.opensearch.plugin:opensearch-security CVEs were published each year.

2022

2023

Other opensearch-project products

Browse vulnerabilities for other products by opensearch-project.

security9 CVEs opensearch5 CVEs opensearch-ruby3 CVEs data-prepper2 CVEs opensearch-dashboards2 CVEs alerting1 CVEs anomaly-detection1 CVEs

Frequently asked questions

Common questions about opensearch-project org.opensearch.plugin:opensearch-security vulnerabilities.

How many CVEs does opensearch-project org.opensearch.plugin:opensearch-security have?: opensearch-project org.opensearch.plugin:opensearch-security has 7 published CVE records since 2022.
How many opensearch-project org.opensearch.plugin:opensearch-security CVEs are in CISA KEV?: None of opensearch-project org.opensearch.plugin:opensearch-security's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for opensearch-project org.opensearch.plugin:opensearch-security vulnerabilities?: No opensearch-project org.opensearch.plugin:opensearch-security CVEs currently have a tracked public exploit in this dataset.
Which versions of opensearch-project org.opensearch.plugin:opensearch-security are affected?: 22 distinct opensearch-project org.opensearch.plugin:opensearch-security versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in opensearch-project org.opensearch.plugin:opensearch-security CVEs?: opensearch-project org.opensearch.plugin:opensearch-security's CVEs most often map to these CWE weakness types: CWE-612 (Improper Authorization of Index Containing Sensitive Information), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-208 (Observable Timing Discrepancy), CWE-281 (Improper Preservation of Permissions).
What is the average severity of opensearch-project org.opensearch.plugin:opensearch-security CVEs?: The average CVSS base score across opensearch-project org.opensearch.plugin:opensearch-security's scored CVEs is 6.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track opensearch-project org.opensearch.plugin:opensearch-security vulnerabilities

Get an alert for each new opensearch-project org.opensearch.plugin:opensearch-security CVE, with AI-written analysis and remediation steps.

Create an account See pricing