AWS vulnerabilities
195 CVEs and advisories name AWS as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-0508MD5 Hash Collision in SageMaker Workflow in aws/sagemaker-python-sdk
- CVE-2025-1969Request approval spoofing in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center
- CVE-2025-0851Path traversal issue in Deep Java Library
- CVE-2025-0693Issue with AWS Sign-in IAM User Login Flow - Possible Username Enumeration
- CVE-2025-23206IAM OIDC custom resource allows connection to unauthorized OIDC provider in aws-cdk
- CVE-2024-45037AWS CDK RestApi not generating authorizationScope correctly in resultant CFN template
- CVE-2024-32888Amazon JDBC Driver for Redshift SQL Injection via line comment generation
- CVE-2024-34072Deserialization of Untrusted Data in sagemaker-python-sdk
- CVE-2024-34073Command Injection in sagemaker-python-sdk
- CVE-2023-51651Potential URI resolution path traversal in the AWS SDK for PHP
- CVE-2023-35165AWS CDK EKS overly permissive trust policies
- CVE-2022-46174Race condition during concurrent TLS mounts in efs-utils
- CVE-2022-23511A privilege escalation issue exists within the Amazon CloudWatch Agent for Windows, software for collecting metrics and logs from Amazon EC2
- CVE-2022-31159Partial Path Traversal in com.amazonaws:aws-java-sdk-s3
- CVE-2022-24709Cross site scripting in @awsui/components-react