7.2.1

DATE	CVE	VULNERABILITY TITLE	RISK
2020-03-31	CVE-2020-7009	Improper Privilege Management vulnerability in Elastic Elasticsearch Elasticsearch versions from 6.7.0 before 6.8.8 and 7.0.0 before 7.6.2 contain a privilege escalation flaw if an attacker is able to create API keys. network low complexity elastic CWE-269	6.5
2019-10-30	CVE-2019-7619	Unspecified vulnerability in Elastic Elasticsearch Elasticsearch versions 7.0.0-7.3.2 and 6.7.0-6.8.3 contain a username disclosure flaw was found in the API Key service. network low complexity elastic	5.0