Amazon Opensearch Security vulnerabilities

2 CVEs affecting Amazon Opensearch Security, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-31141, published 2023-05-08.

More from Amazon.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-31141, published 2023-05-08. Medium severity, CVSS 5.9. EPSS: 0.5% chance of exploitation in the next 30 days. OpenSearch is open-source software suite for search, analytics, and observability applications. Prior to versions 1.3.10 and 2.7.0, there is an issue with the implementation of fine-grained access…
• CVE-2023-25806, published 2023-03-02. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. OpenSearch Security is a plugin for OpenSearch that offers encryption, authentication and authorization. There is an observable discrepancy in the authentication response time between calls where the…