Skip to content

Vendor

software.amazon.encryption.s3 vulnerabilities

1 published CVE affecting software.amazon.encryption.s3, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of software.amazon.encryption.s3 alerts

Products

Latest software.amazon.encryption.s3 CVEs

Newest publication first

  1. CVE-2025-14763 Amazon S3 Encryption Client for Java has a Key Commitment Issue

    Published
    MediumCVSS 6.0

    Missing cryptographic key commitment in the Amazon S3 Encryption Client for Java may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an "instruction file" instead of S3's metadata...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.