# License Banned Nexus IQ Vulnerability in 7.16.2

**URL:** <https://discuss.elastic.co/t/license-banned-nexus-iq-vulnerability-in-7-16-2/328419>\
**Category:** Elasticsearch\
**Created:** [March 24, 2023, 4:57am UTC](https://discuss.elastic.co/t/license-banned-nexus-iq-vulnerability-in-7-16-2/328419 "2023-03-24T04:57:57Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![PAVK\_PRASAD](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pavk_prasad/32/104356_2.png) [@PAVK\_PRASAD](https://discuss.elastic.co/u/PAVK_PRASAD)\
**Post date:** [March 24, 2023, 4:57am UTC](https://discuss.elastic.co/t/license-banned-nexus-iq-vulnerability-in-7-16-2/328419/1 "2023-03-24T04:57:57Z")

</div>

Hi Team,

We are using 7.16.2 Version of ES and we Observed "License Banned" Nexus IQ Scan issue in 7.16.2 with Elastic Search where as ES 7.10.0 doesn't have this issue.

If We want go back to 7.10.0, In that version we observed that Log4j Vulnerability is there.  
So, How to resolve this Nexus IQ Scan issue.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/6/66bbeb0143709e7ae01e75479c33d5cf6df5af77.png)

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [March 24, 2023, 5:50am UTC](https://discuss.elastic.co/t/license-banned-nexus-iq-vulnerability-in-7-16-2/328419/2 "2023-03-24T05:50:05Z")

</div>

Please see [Security issues | Elastic](https://www.elastic.co/community/security) for these sorts of things;

> Users and customers may report any other potential security issues to [security@elastic.co](mailto:security@elastic.co). This address can be used for product security related inquiries or requests about other security topics that are not explicitly mentioned here. We can accept only security issues at this address. Bug reports should be directed to the bug database of the project you're reporting it on or raised to Elastic Support.

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [March 24, 2023, 6:31am UTC](https://discuss.elastic.co/t/license-banned-nexus-iq-vulnerability-in-7-16-2/328419/3 "2023-03-24T06:31:38Z")

</div>

The last version of Elasticsearch released under the Apache license was indeed 7.10.2. This is no longer maintained and has not receved any security fixes.

If you are not able to use newer versions of Elasticsearch due to the license I would recommend having a look at Opensearch, which uses the Apache license. This started out as a fork of Elasticsearch 7.10.2 but is now a completely separate product that requires its own client libraries and is no longer compatible fully with Elasticsearch. Exactly how much you would need to change depends on how you are using and interacting with Elasticsearch.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 24, 2023, 6:31am UTC](https://discuss.elastic.co/t/license-banned-nexus-iq-vulnerability-in-7-16-2/328419/4 "2023-03-24T06:31:39Z")

</div>

OpenSearch/OpenDistro are AWS run products and differ from the original Elasticsearch and Kibana products that Elastic builds and maintains. You may need to contact them directly for further assistance.

(This is an automated response from your friendly Elastic bot. Please report this post if you have any suggestions or concerns :elasticheart: )

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 21, 2023, 6:32am UTC](https://discuss.elastic.co/t/license-banned-nexus-iq-vulnerability-in-7-16-2/328419/5 "2023-04-21T06:32:17Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
