O
Vendor security profile
OpenSearch
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs8
Critical0
CISA KEV0
Public exploit0
Patch rate%100
Avg. CVSS8.6
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
7
1
0
CVE KEV
CVE severity distribution
8toplam CVE
High8 (100%)
Patch and exploitation view
%100
Verified patch
%0
CISA KEV
%0
Public exploit
8Patch available
0Partial
0Workaround
0Vendor: no patch
0Unknown
Latest vulnerabilities
8.7
CVE-2026-84942
Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards
A
Patch verifiedEPSS %1
8.8
CVE-2026-83497
Unrestricted Java Deserialization in OpenSearch SQL Plugin Cursor Pagination
O
Patch verifiedEPSS %1
8.7
CVE-2026-77811
Stored Cross-Site Scripting via Integration Template Asset in OpenSearch Dashboards
A
Patch verifiedEPSS %1
8.8
CVE-2026-18420
RCE via Prototype Pollution in OpenSearch Dashboards
A
Patch verifiedEPSS %1
7.5
CVE-2026-75897
Uncontrolled Resource Consumption in Capabilities Route in OpenSearch Dashboards
O
Patch verifiedEPSS %1