Elastic Cloud

Elastic · package FR2004446306

Current status Authorized · Moderate impact · since 2026-07-07 Service modelSaaS MarketplaceRev5 · source: marketplace Security posture 4 high 3 on KEV · 4 correlated CVEs

CMMC DOMAINS ADDRESSED

SC · System and Communications Protection IA · Identification and Authentication AU · Audit and Accountability SI · System and Information Integrity

STATUS TIMELINE · SCD2

STATUS	IMPACT	FROM	TO
Authorized	Moderate	2026-07-07	current

AUTHORIZATIONS

AGENCY	TYPE	DATE
Department of Homeland Security	Agency	2020-05-27

EXPOSED CVEs · CORRELATED TO THIS PRODUCT all exposures

SEVERITY	CVE	TITLE	PUBLISHED
HIGH	CVE-2026-33466	CVE-2026-33466: Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in Logstash	2026-04-08
HIGH	CVE-2014-3120	Elasticsearch Remote Code Execution Vulnerability	2022-03-25
HIGH	CVE-2015-1427	Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability	2022-03-25
HIGH	CVE-2019-7609	Kibana Arbitrary Code Execution	2022-01-10