opensearch
Security Risk Profile
56
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 13 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 9, 2024 to present
13
Total CVEs
3
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
6.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
56/100
medium
🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
0High
3Medium
5Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
SSRF
1
2
Input Validation
1
3
XSS
1
Most Affected Products
1. OpenSearch OpenSearch6
2. maven/org.opensearch:opensearch-common2
3. OpenSearch Data Prepper2
4. Amazon Opensearch Data Prepper2
5. OpenSearch observability2
Recent Vulnerabilities
See more →CVE-2026-18952
CVSS 8.1high
Missing Input Validation in Threat Intel Feed Parser in OpenSearch Security Analytics Plugin
8/12/2026🔧 No Patch
CVE-2025-9624
CVSS 8.3EPSS 0%high
OpenSearch 3.2.0 - Nested Boolean/Disjunction asymmetric DoS
11/25/2025
CVE-2025-62371
CVSS 7.4high
OpenSearch Data Prepper plugins trusts all SSL certificates by default
10/15/2025
EOL-opensearch-3
unknown
5/6/2025
CVE-2024-54160
CVSS 6.4medium
2/12/2025🔧 No Patch
CVE-2024-55886
CVSS 6.9medium
OpenTelemetry Logs source may lack authentication with some custom plugins
12/12/2024🔧 No Patch
EOL-opensearch-1
unknown
12/10/2024
latest-version-opensearch-1
unknown
12/10/2024
EOL-opensearch-2
unknown
10/28/2024
latest-version-opensearch-2
unknown
10/28/2024
Monitor opensearch in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.