| Title |
Severity |
Exploit |
Date |
Affected Version |
|
OpenSearch unauthorized data access on fields protected by field level security if field is a member of an object
|
Medium
|
|
Aug 1, 2025
|
< 2.19.3.0
|
|
OpenSearch unauthorized data access on fields protected by field masking for fields of type ip, geo_point, geo_shape, xy_point, xy_shape
|
Medium
|
|
Aug 1, 2025
|
< 2.19.3.0
|
|
OpenSearch uncontrolled resource consumption
|
High
|
|
Oct 17, 2023
|
< 1.3.14.0
>= 2.0.0.0 < 2.11.0.0
|
|
CVE-2023-45807
|
Medium
|
|
Oct 17, 2023
|
>= 2.0.0.0 < 2.11.0.0
< 1.3.14.0
|
|
CVE-2023-31141
|
Medium
|
|
May 8, 2023
|
>= 1.0.0 < 1.3.10.0
>= 2.0.0 < 2.7.0.0
|
|
CVE-2023-25806
|
Medium
|
|
Mar 2, 2023
|
< 1.3.9
>= 2.0.0 < 2.6.0
|
|
CVE-2022-41918
|
Medium
|
|
Nov 16, 2022
|
< 1.3.7
>= 2.0.0 < 2.4.0
|
|
CVE-2022-35980
|
High
|
|
Aug 12, 2022
|
>= 2.0.0.0 < 2.2.0.0
|
org.opensearch.plugin / opensearch-security