Amazon
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 356 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 19, 2007 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune
RSA PKCS#1 v1.5 padding oracle via legacy envelope key format downgrade in Amazon S3 Encryption Client for .NET
Multiple TLS libraries: X.509 Name Constraints enforcement bypasses (CVE-2026-34073, CVE-2026-3833, CVE-2026-5263, CVE-2026-33810; CERT/CC VU#573195, VU#948176, VU#410595)
OS command injection in Amazon Agent Plugins for AWS databases-on-aws
Missing authorization checks in Amazon Athena engine version 3 request handling
Code injection via unencoded configuration values during Python code generation in Bedrock AgentCore Starter Toolkit agent import
OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution when running on Amazon SageMaker Unified Studio
Kiro IDE Allows Agentic Writes to Global Configurations While Working in Untrusted Workspaces
Potential denial of service when configured to send Retry packets in s2n-quic
Missing Authorization in sfExecuteAWSService Lambda Dispatcher in Amazon Connect Salesforce Lambda
Monitor Amazon in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.