elasticsearch 1.4 and 1.6 vulnerability differences
You can see the security vulnerabilities on the security page on the elastic.co website.
You can also see the security fixes for each verions by checking the release notes for each release: https://www.elastic.co/downloads/past-releases