Amazon Data.all

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs

data.all admin user may access potentially sensitive data stored by producers via logs

Published 2024-11-09 · Modified

6.9EPSS 0.004

data.all does not invalidate authentication token upon user logout

Published 2024-11-09 · Modified

6.3EPSS 0.005

data.all authenticated users can perform restricted operations against DataSets and Environments

Published 2024-11-09 · Modified

5.4EPSS 0.003

data.all authenticated users can obtain incorrect object level authorizations

Published 2024-11-09 · Modified

5.3EPSS 0.003

data.all authenticated users can perform mutating update operations on persisted notification records

Published 2024-11-09 · Modified

5.3EPSS 0.003