Aws Encryption Sdk

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-23680 Jan 19, 21:15 Maven MEDIUM PATCH This Month

AWS Encryption SDK for Java versions 2.0.0 to 2.2.0 and less than 1.9.0 incorrectly validates some invalid ECDSA signatures. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Java Information Disclosure Jwt Attack Amazon Aws Encryption Sdk

NVD GitHub VulDB

CVSS 3.1

5.3

EPSS

0.2%

CVE-2020-8897 Nov 16, 12:15 LIB HIGH POC PATCH This Week

A weak robustness vulnerability exists in the AWS Encryption SDKs for Java, Python, C and Javalcript prior to versions 2.0.0. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Python Information Disclosure Amazon Aws Encryption Sdk

NVD GitHub

CVSS 3.1

8.1

EPSS

0.4%

CVE-2024-23680 Maven

EPSS 0% CVSS 5.3

MEDIUM PATCH This Month

Java Information Disclosure Jwt Attack +2

NVD GitHub VulDB

CVE-2020-8897 LIB

EPSS 0% CVSS 8.1

HIGH POC PATCH This Week

Python Information Disclosure Amazon +1

NVD GitHub