CVE-2021-22137

score

<0.1

cvss

5.3

epss

1.2%

published

2021-05-13

kev added

—

first seen

2026-10-21

Elasticsearch < 7.11.2, 6.8.15 contains a document disclosure caused by improper preservation of security permissions during cross-cluster search queries, letting attackers discover documents they should not access, exploit requires executing cross-cluster search queries.