Amazon Web Services
Security Risk Profile
59
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 268 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 1, 2013 to present
268
Total CVEs
13
Critical+High
1
Exploited
10
Unpatched
Threat Assessment
Avg CVSS
7.9
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
10
Critical/High
Risk Level
59/100
medium
⚠️ 1 Active Exploits📈 7 in Last 30 Days
Severity Distribution
Critical
2High
11Medium
6Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
4Age Distribution
Common Weaknesses (CWE)
1
XSS
1
2
Input Validation
1
3
Double Free
1
4
Infoleak
1
5
Divide by Zero
1
Most Affected Products
1. Amazon Web Services Lambda76
2. Amazon Web Services Neptune54
3. Amazon Web Services Elastic Kubernetes Service33
4. Amazon Web Services Corretto23
5. Amazon Web Services RDS for MySQL22
Recent Vulnerabilities
See more →CVE-2026-18481
CVSS 6.2medium
Stored XSS in Participant URL Field leads to Account Takeover via Session Token Theft
7/31/2026🔧 No Patch
EOL-aws-lambda-java11.al2023
unknown
7/31/2026
EOL-aws-lambda-java8.al2023
unknown
7/31/2026
EOL-aws-lambda-java17.al2023
unknown
7/31/2026
EOL-amazon-neptune-1.4.8.0
unknown
7/27/2026
CVE-2026-16796
CVSS 8.4high
Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()
7/23/2026
CVE-2026-15415
CVSS 6.8medium
Path traversal and arbitrary file write in the workflow linters of aws-healthomics-mcp-server
7/17/2026🔧 No Patch
CVE-2026-15737
CVSS 5.7medium
Sensitive content disclosure via OpenTelemetry spans in AgentCore Python SDK
7/16/2026🔧 No Patch
CVE-2026-14265
CVSS 7.7high
RCE via Deserialization in AWS Advanced JDBC Wrapper
7/1/2026🔧 No Patch
CVE-2026-13769
CVSS 6.8medium
Overly permissive File Permissions in AWS CLI
7/1/2026
Monitor Amazon Web Services in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.