Skip to content

Product

software.amazon.encryption.s3/amazon-s3-encryption-client-java vulnerabilities

1 published CVE affecting software.amazon.encryption.s3/amazon-s3-encryption-client-java, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest software.amazon.encryption.s3/amazon-s3-encryption-client-java CVEs

Newest publication first

  1. CVE-2025-14763 Amazon S3 Encryption Client for Java has a Key Commitment Issue

    Published
    MediumCVSS 6.0

    Summary S3 Encryption Client for Java is an open-source client-side encryption library used to facilitate writing and reading encrypted records to S3. When the encrypted data key (EDK) is stored in an "Instruction File" instead of S3's metadata record, the EDK is exposed to an "I...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.