# Elasticsearch 8.15.2: OpenJDK CVEs

**URL:** <https://discuss.elastic.co/t/elasticsearch-8-15-2-openjdk-cves/377335>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [April 21, 2025, 9:36am UTC](https://discuss.elastic.co/t/elasticsearch-8-15-2-openjdk-cves/377335 "2025-04-21T09:36:03Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [April 21, 2025, 1:47pm UTC](https://discuss.elastic.co/t/elasticsearch-8-15-2-openjdk-cves/377335/2 "2025-04-21T13:47:32Z")

</div>

Duplicate

> [@Issue with OpenJDK Vulnerabilities (CVE-2024) in Elasticsearch 8.15.2](https://discuss.elastic.co/t/issue-with-openjdk-vulnerabilities-cve-2024-in-elasticsearch-8-15-2/377328/1):
>
> Hi, As part of the vulnerability assessment (VA) scan on our ELK servers, we identified that the OpenJDK version is affected by multiple vulnerabilities. We are using a self-managed cluster. We did upgrade the ELK stack from version 8.13.2 to 8.15.2, but the OpenJDK vulnerabilities still remain unresolved. Current Elasticsearch Version: 8.15.2 Path: /usr/share/elasticsearch/jdk/ Installed Bundled JDK Version: 22.0.1 The reported CVE IDs are: CVE-2024-21131 CVE-2024-21138 CVE-2024-21140 CV…

---

_[View the full topic](https://discuss.elastic.co/t/elasticsearch-8-15-2-openjdk-cves/377335)._