Skip to content

CVE record · 1 source

CVE-2026-115707

CVSS 6.4

Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise (ECE) can lead to privilege…

Vendor: Elastic
Product: Elastic Cloud Enterprise
CVSS v3.1: 6.4 AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-538
Exposure class: Database

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

14

CVE NVD 2d ago

Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise (ECE) can lead to privilege…

Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise (ECE) can lead to privilege escalation via Retrieve Embedded Sensitive Data (CAPEC-37). After the ECE…

CVSS 6.4 CVE-2026-115707 Elastic