CVE-2022-23712CWE-754
A Denial of Service flaw was discovered in Elasticsearch
published June 6, 2022
What it is
A Denial of Service flaw was discovered in Elasticsearch. Using this vulnerability, an unauthenticated attacker could forcibly shut down an Elasticsearch node with a specifically formatted network request.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.07550 · 94.5th percentile
- Weakness
- CWE-754 · Improper Check for Unusual or Exceptional Conditions
- Published
- 2022-06-06T17:07Z
EPSS history
Timeline