Vulnerabilities > Elastic > Enterprise Search > 7.14.1

DATE CVE VULNERABILITY TITLE RISK
2023-12-12 CVE-2023-49923 Information Exposure Through Log Files vulnerability in Elastic Enterprise Search
An issue was discovered by Elastic whereby the Documents API of App Search logged the raw contents of indexed documents at INFO log level.
network
low complexity
elastic CWE-532
6.5
2021-12-07 CVE-2021-37940 Server-Side Request Forgery (SSRF) vulnerability in Elastic Enterprise Search
An information disclosure via GET request server-side request forgery vulnerability was discovered with the Workplace Search Github Enterprise Server integration.
network
low complexity
elastic CWE-918
4.0