Search Guard Flx
Approved changes feed: RSS · Atom
cpe:2.3:a:floragunn:search_guard_flx:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Floragunn (6b8f8f01-a69b-509e-bcc0-fec59dcdec2c) |
|---|---|
| Product | Search Guard Flx (dc7869e8-2eb0-53d5-a3cf-cd1fe189fb1f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-4819 |
vulnerable | 2026-06-08 08:07:02.419740 |
Search Guard audit logs can contain under certain conditions user credentials
MEDIUM (4.9)
In Search Guard FLX versions from 1.0.0 up to 4.0.1, the audit logging feature might log user credentials from users logging into Kibana.
Published: 2026-03-31T14:57:56.792Z
Updated: 2026-03-31T17:23:46.025Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4818 |
vulnerable | 2026-06-08 08:07:02.419436 |
Some management operations on data streams are not properly restricted when user does not have the necessary privileges
MEDIUM (6.8)
In Search Guard FLX versions from 3.0.0 up to 4.0.1, there exists an issue which allows users without the necessary privileges to execute some management operations against data streams.
Published: 2026-03-31T14:53:19.875Z
Updated: 2026-03-31T17:23:23.853Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4799 |
vulnerable | 2026-06-08 08:07:02.378450 |
Open redirect vulnerability in Search Guard Kibana Plugin via manipulated requests
MEDIUM (4.3)
In Search Guard FLX up to version 4.0.1, it is possible to use specially crafted requests to redirect the user to an untrusted URL.
Published: 2026-03-31T14:41:05.646Z
Updated: 2026-03-31T17:20:02.797Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13653 |
vulnerable | 2026-06-08 07:06:32.405845 |
Unauthorized access to documents in data streams with specially crafted requests
MEDIUM (4.3)
In Search Guard FLX versions from 3.1.0 up to 4.0.0 with enterprise modules being disabled, there exists an issue which allows authenticated users to use specially crafted requests to read documents from data streams without having the respective privileges.
Published: 2025-12-01T18:02:00.573Z
Updated: 2025-12-01T18:33:42.466Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12149 |
vulnerable | 2026-06-08 07:04:29.758612 |
Unauthorized access to documents protected by Document-Level Security (DLS), when Signals watches include a search query involving protected documents
In Search Guard FLX versions 3.1.2 and earlier, while Document-Level Security (DLS) is correctly enforced elsewhere, when the search is triggered from a Signals watch, the DLS rule is not enforced, allowing access to all documents in the queried indices.
Published: 2025-11-14T13:58:42.775Z
Updated: 2025-11-14T16:51:01.897Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12148 |
vulnerable | 2026-06-08 07:04:29.758321 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12147 |
vulnerable | 2026-06-08 07:04:29.757822 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.