Amazon Aws Cloud Development Kit vulnerabilities

4 CVEs affecting Amazon Aws Cloud Development Kit, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-2598, published 2025-03-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-35165, published 2023-06-23. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. AWS Cloud Development Kit (AWS CDK) is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. In the packages `aws-cdk-lib`…
CVE-2025-23206, published 2025-01-17. High severity, CVSS 8.1. EPSS: 0.3% chance of exploitation in the next 30 days. The AWS Cloud Development Kit (AWS CDK) is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. Users who use IAM OIDC…
CVE-2024-45037, published 2024-08-27. Medium severity, CVSS 6.4. EPSS: 0.3% chance of exploitation in the next 30 days. The AWS Cloud Development Kit (CDK) is an open-source framework for defining cloud infrastructure using code. Customers use it to create their own applications which are converted to AWS…
CVE-2025-2598, published 2025-03-21. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. When the AWS Cloud Development Kit (AWS CDK) Command Line Interface (AWS CDK CLI) is used with a credential plugin which returns an expiration property with the retrieved AWS credentials, the…