CVE-2021-22145: Elastic Elasticsearch

Medium severity, CVSS 6.5. EPSS: 76.2% chance of exploitation in the next 30 days.

A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit a malformed query that would result in an error message returned containing previously used portions of a data buffer. This buffer could contain sensitive information such as Elasticsearch documents or authentication details.

Affected products

• Elastic Elasticsearch: from 7.10.0, up to and including 7.13.3
• Oracle Communications Cloud Native Core Automated Test Suite: version 1.8.0 only

Published 2021-07-21. Last modified 2026-06-17.