CVE-2025-37731
Improper authentication in Elasticsearch
CVSS score
7.4
EPSS probability
%0.2
Risk score
0.0
Published
10 mo ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
No verified news item has been matched to this CVE yet.
Similar Vulnerabilities
9.0
CVE-2021-45046 Actively exploitedIncomplete fix for Apache Log4j vulnerability
Workaround Public Exploits:3EPSS %100
6.8
CVE-2015-1427 Actively exploitedelasticsearch: remote code execution via Groovy sandbox bypass
Patch verified Public Exploits:9EPSS %100
6.8
CVE-2014-3120 Actively exploitedelasticsearch: remote code execution flaw via dynamic scripting
VendorRed HatProduct6Server-SubscriptionAssetManager14:katello-configure-0:1.4.5.1-3.el6sam.noarch+8 etkilenen
RH
Patch verified Public Exploits:7EPSS %89
9.8
CVE-2024-56325Apache Pinot Vulnerable to Authentication Bypass
Patch status unknown Public Exploits:1EPSS %80
7.5
CVE-2020-13935Vulnerability in N/a Apache Tomcat
Patch verifiedEPSS %87
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-37731"