elastic_cloud_enterprise vulnerabilities

CVEs whose affected-version data names the elastic_cloud_enterprise package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-37729Critical· 9.1

11mo ago

Improper neutralization of special elements used in a template engine in Elastic Cloud Enterprise (ECE) can lead to a malicious actor with Admin access exfiltrating sensitive information and issuing commands via a specially crafted strin…

Improper neutralization of special elements used in a template engine in Elastic Cloud Enterprise (ECE) can lead to a malicious actor with Admin access exfiltrating sensitive information and issuing commands via a specially crafted strin…

▾ Midnightelastic · elastic_cloud_enterpriseEPSS 0.66%via NVD