Amazon Opensearch Data Prepper — known CVE vulnerabilities

Every CVE whose affected-product data names Amazon Opensearch Data Prepper, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2023-44487 — CVSS 7.5 (high) — actively exploited: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly…
• CVE-2025-62371 — CVSS 7.4 (high): OpenSearch Data Prepper as an open source data collector for observability data. In versions prior to 2.12.2, the OpenSearch sink and…
• CVE-2024-55886 — CVSS 6.9 (medium): OpenSearch Data Prepper is a component of the OpenSearch project that accepts, filters, transforms, enriches, and routes data at scale. A…