Known vulnerabilities in amazon-ssm-agent

Vendor: SUSE
Software: amazon-ssm-agent
Software CPE: cpe:2.3:o:suse:amazon-ssm-agent:*:*:*:*:*:suse_linux:*:*
Website: https://www.suse.com/
Total vulnerabilities: 5
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting amazon-ssm-agent amazon-ssm-agent is affected by 5 known vulnerabilities: 2 medium, 3 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140595 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-71557		 CWE-22 Low
No
No
 3.3.5226.0-150000.5.40.1 31.07.2026 SB2026073124
SB2026090865
#VU140594 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-71556		 CWE-59 Medium
No
No
 3.3.5226.0-150000.5.40.1 31.07.2026 SB2026073124
SB2026090865
#VU118717 - Improper input validation
CVE-2025-47913		 CWE-20 Low
No
No
 3.3.1611.0-4.42.1, 3.3.1611.0-150000.5.26.1 24.11.2025 SB2025112448
SB2025112455
SB2025112456
and 55 more
#VU106253 - Improper input validation
CVE-2025-22870		 CWE-20 Medium
Available
No
 3.3.1611.0-4.39.1, 3.3.1611.0-150000.5.23.1 30.03.2025 SB2025033001
SB2025033002
SB2025033003
and 106 more
#VU103421 - Argument Injection or Modification
CVE-2025-21613		 CWE-88 Low
No
No
 3.3.1611.0-4.36.1, 3.3.1611.0-150000.5.20.1 29.01.2025 SB2025012918
SB2025012919
SB2025012920
and 27 more