Aws Encryption Sdk

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-23680 Maven MEDIUM PATCH This Month

AWS Encryption SDK for Java versions 2.0.0 to 2.2.0 and less than 1.9.0 incorrectly validates some invalid ECDSA signatures. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Jwt Attack Java Information Disclosure Aws Encryption Sdk

NVD GitHub VulDB

CVSS 3.1

5.3

EPSS

0.2%

CVE-2020-8897 LIB HIGH POC PATCH This Week

A weak robustness vulnerability exists in the AWS Encryption SDKs for Java, Python, C and Javalcript prior to versions 2.0.0. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Python Information Disclosure Aws Encryption Sdk

NVD GitHub

CVSS 3.1

8.1

EPSS

0.4%

CVE-2024-23680 Maven

EPSS 0% CVSS 5.3

MEDIUM PATCH This Month

Jwt Attack Java Information Disclosure +1

NVD GitHub VulDB

CVE-2020-8897 LIB

EPSS 0% CVSS 8.1

HIGH POC PATCH This Week

Python Information Disclosure Aws Encryption Sdk

NVD GitHub