Approved changes feed: RSS · Atom

cpe:2.3:a:search-guard:flx:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSearch Guard (672aad63-4603-5757-88e6-9ba710066b3a)
ProductFlx (8748ed53-76eb-55e9-824d-60dd36596b4a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-4819 vulnerable 2026-06-08 08:07:02.419772 Search Guard audit logs can contain under certain conditions user credentials
MEDIUM (4.9)
In Search Guard FLX versions from 1.0.0 up to 4.0.1, the audit logging feature might log user credentials from users logging into Kibana.
Published: 2026-03-31T14:57:56.792Z
Updated: 2026-03-31T17:23:46.025Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4818 vulnerable 2026-06-08 08:07:02.419480 Some management operations on data streams are not properly restricted when user does not have the necessary privileges
MEDIUM (6.8)
In Search Guard FLX versions from 3.0.0 up to 4.0.1, there exists an issue which allows users without the necessary privileges to execute some management operations against data streams.
Published: 2026-03-31T14:53:19.875Z
Updated: 2026-03-31T17:23:23.853Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4799 vulnerable 2026-06-08 08:07:02.379515 Open redirect vulnerability in Search Guard Kibana Plugin via manipulated requests
MEDIUM (4.3)
In Search Guard FLX up to version 4.0.1, it is possible to use specially crafted requests to redirect the user to an untrusted URL.
Published: 2026-03-31T14:41:05.646Z
Updated: 2026-03-31T17:20:02.797Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.