Read the docs

AWS

Records384All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical46CVSS 9.0–10.0
CVSS high198CVSS 7.0–8.9

Exploited now

AWS records in CISA KEV
TI-2026-23989 Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability Priority CRITICAL 93KEV 2026-05-01TI-2023-23979 HTTP/2 Rapid Reset Attack Vulnerability Priority CRITICAL 90KEV 2023-10-10

Components

Products in the NVD configurations · select one to filter the records
Freertos 21 records MEDIUM Amazon Web Services Freertos 14 records MEDIUM Fire Os 13 records MEDIUM Opensearch 11 records HIGH Tough 10 records MEDIUM Freertos-plus-tcp 9 records MEDIUM Blink Xt2 Sync Module Firmware 7 records MEDIUM Athena Odbc 6 records MEDIUM

Records

11 records in Opensearch · all components

TI-2022-13159 CVE-2022-31115 · GHSA-977c-63xq-cgw3

Unsafe YAML deserialization in opensearch-ruby

Priority HIGH 73

opensearch-ruby is a community-driven, open source fork of elasticsearch-ruby.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01617 Published 2022-06-30 Fixed in 2.0.1, 2.0.2 CWE-502
TI-2025-08817 CVE-2025-9624 · GHSA-mw3v-mmfw-3x2g

OpenSearch 3.2.0 - Nested Boolean/Disjunction asymmetric DoS

Priority HIGH 69

A vulnerability in OpenSearch allows attackers to cause Denial of Service (DoS) by submitting complex query_string inputs.

CVSS 4.0HIGH 8.3 Network Low privileges No interaction EPSS 0.00727 Published 2025-11-25 Fixed in 3.3.0, 2.19.4 CWE-674
TI-2023-09441 CVE-2023-23612 · GHSA-864v-6qj7-62qj

Issue with whitespace in JWT roles in OpenSearch

Priority MEDIUM 40

OpenSearch is an open source distributed and RESTful search engine.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00833 Published 2023-01-24 Fixed in 2.5.0, 1.3.8 CWE-287
TI-2023-11077 CVE-2023-25806 · GHSA-c6wg-cm5x-rqvj

Time discrepancy in authentication responses in OpenSearch

Priority LOW 30

OpenSearch Security is a plugin for OpenSearch that offers encryption, authentication and authorization.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00328 Published 2023-03-02 Fixed in 1.3.9, 2.6.0 CWE-208
TI-2023-24568 CVE-2023-45807 · GHSA-72q2-gwwf-6hrv

OpenSearch Issue with tenant read-only permissions

Priority LOW 25

OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana following the license change in early 2021.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00487 Published 2023-10-16 Fixed in 1.3.14.0, 2.11.0.0 CWE-281
Open these records in search →