OpenSearch vulnerabilities
6 published CVEs name OpenSearch among the affected products.
- Published CVEs
- 6
- Last 12 months
- 6
- Critical
- 0
- Known exploited
- 0
Critical 0High 4Medium 2Low 0Not scored 0
CVEs per yearBy the year they were published
- 20251
- 20265
Newest CVEs
- CVE-2026-84942
Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards
AWS · Amazon OpenSearch Service
Medium6.3 - CVE-2026-83497
Unrestricted Java Deserialization in OpenSearch SQL Plugin Cursor Pagination
OpenSearch · OpenSearch
High8.7 - CVE-2026-77811
Stored Cross-Site Scripting via Integration Template Asset in OpenSearch Dashboards
AWS · Amazon OpenSearch Service
Medium6.2 - CVE-2026-18420
RCE via Prototype Pollution in OpenSearch Dashboards
AWS · Amazon OpenSearch Service
High8.7 - CVE-2026-75897
Uncontrolled Resource Consumption in Capabilities Route in OpenSearch Dashboards
OpenSearch · OpenSearch Dashboards
High8.7 - CVE-2025-9624
OpenSearch 3.2.0 - Nested Boolean/Disjunction asymmetric DoS
OpenSearch · OpenSearch
High8.3