VDB
CVE-2025-37731
CVE-2025-37731
PUBLISHED
CVSS 7.400000095367432 HIGH
Elasticsearch Improper Authentication
EPSS 0.19% · 8.8th percentile
Risk Scores
CVSS 3.1
7.400000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS Score
0.19%
8.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | elasticsearch | 0, 9.0.0, 9.2.0 |
| Bitnami | elasticsearch | 9.0.0, 9.2.0, 0 |
Timeline
- Dec 14, 2025 CVE Published
- Dec 15, 2025 EPSS Score
- Dec 15, 2025 CVE Updated
- Dec 19, 2025 EPSS Score
- Dec 24, 2025 EPSS Score
- Dec 28, 2025 EPSS Score
- Jan 2, 2026 EPSS Score
- Jan 6, 2026 EPSS Score
- Jan 11, 2026 EPSS Score
- Jan 15, 2026 EPSS Score
- Jan 20, 2026 EPSS Score
- Jan 24, 2026 EPSS Score