Vulnerabilidades de OpenSearch

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de OpenSearch: 2 registro(s), com severidade, exploração e correções.

OpenSearch 1 OpenSearch Dashboards dashboards-observability plugin 1

Somente exploradas (KEV) →

CVE-2026-77811 Alta · 8.7 CWE-79 21/08/2026

Stored Cross-Site Scripting via Integration Template Asset in OpenSearch Dashboards

Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved objects to execute arbitrary JavaScript in the context of other users' browser sessions by uploading a saved asset with arbitrary web content.

CVE-2025-9624 Alta · 7.5 CWE-674 25/11/2025

OpenSearch 3.2.0 - Nested Boolean/Disjunction asymmetric DoS

A vulnerability in OpenSearch allows attackers to cause Denial of Service (DoS) by submitting complex query_string inputs. This issue affects all OpenSearch versions between 3.0.0 and < 3.3.0 and OpenSearch < 2.19.4.