AWS Security Advisories · April 2025 — AWS Security Advisories
11 advisories 42 CVEs 1 EXPLOITED

Amazon Linux (AL1, AL2, AL2023), AWS Security Bulletins, and AWS SDK CVEs for 2025-04. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

ALAS-2025-1969

ALAS · AL1ExploitedCISA KEV listedImportant2025-04-17

ALAS-2025-1969: tomcat8 (important)

CVEs:CVE-2025-24813

Affected products

ProductStatusVendorPackageEcosystem
tomcat8 affected Amazon tomcat8
Upstream advisory

ALAS-2025-1974

ALAS · AL1Coalition ESS < 30%Important2025-04-29

ALAS-2025-1974: ctags (important)

CVEs:CVE-2022-4515

Affected products

ProductStatusVendorPackageEcosystem
ctags affected Amazon ctags
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.