# Issue with OpenJDK Vulnerabilities (CVE-2024) in Elasticsearch 8.15.2

**URL:** <https://discuss.elastic.co/t/issue-with-openjdk-vulnerabilities-cve-2024-in-elasticsearch-8-15-2/377330>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [April 21, 2025, 8:34am UTC](https://discuss.elastic.co/t/issue-with-openjdk-vulnerabilities-cve-2024-in-elasticsearch-8-15-2/377330 "2025-04-21T08:34:46Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [April 21, 2025, 1:47pm UTC](https://discuss.elastic.co/t/issue-with-openjdk-vulnerabilities-cve-2024-in-elasticsearch-8-15-2/377330/2 "2025-04-21T13:47:11Z")

</div>

Duplicate

> [@Issue with OpenJDK Vulnerabilities (CVE-2024) in Elasticsearch 8.15.2](https://discuss.elastic.co/t/issue-with-openjdk-vulnerabilities-cve-2024-in-elasticsearch-8-15-2/377328/1):
>
> Hi, As part of the vulnerability assessment (VA) scan on our ELK servers, we identified that the OpenJDK version is affected by multiple vulnerabilities. We are using a self-managed cluster. We did upgrade the ELK stack from version 8.13.2 to 8.15.2, but the OpenJDK vulnerabilities still remain unresolved. Current Elasticsearch Version: 8.15.2 Path: /usr/share/elasticsearch/jdk/ Installed Bundled JDK Version: 22.0.1 The reported CVE IDs are: CVE-2024-21131 CVE-2024-21138 CVE-2024-21140 CV…

---

_[View the full topic](https://discuss.elastic.co/t/issue-with-openjdk-vulnerabilities-cve-2024-in-elasticsearch-8-15-2/377330)._