Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2023-12-12	CVE-2023-49923	Information Exposure Through Log Files vulnerability in Elastic Enterprise Search An issue was discovered by Elastic whereby the Documents API of App Search logged the raw contents of indexed documents at INFO log level. network low complexity elastic CWE-532	6.5
2021-12-07	CVE-2021-37940	Server-Side Request Forgery (SSRF) vulnerability in Elastic Enterprise Search An information disclosure via GET request server-side request forgery vulnerability was discovered with the Workplace Search Github Enterprise Server integration. network low complexity elastic CWE-918	6.8