VendorsAmazonopensearch_data_prepperall versions
Vulnerabilities

Amazon OpenSearch Data Prepper

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Published 2023-10-10 · Analyzed
7.5KEV1 PoCEPSS 1.000
CVE-2025-62371
OpenSearch Data Prepper plugins trusts all SSL certificates by default
Published 2025-10-15 · Analyzed
7.4EPSS 0.002
CVE-2024-55886
OpenTelemetry Logs source may lack authentication with some custom plugins
Published 2024-12-12 · Analyzed
6.9EPSS 0.003