System	Score	Found at
cvssv3.1	5.3	https://github.com/advisories/GHSA-55xh-53m6-936r
cvssv4	6.9	https://github.com/advisories/GHSA-55xh-53m6-936r
generic_textual	MODERATE	https://github.com/advisories/GHSA-55xh-53m6-936r
cvssv3.1_qr	MODERATE	https://github.com/advisories/GHSA-gvc7-gjrw-hj65
cvssv3.1	5.3	https://github.com/aws/aws-encryption-sdk-java
cvssv4	6.9	https://github.com/aws/aws-encryption-sdk-java
generic_textual	MODERATE	https://github.com/aws/aws-encryption-sdk-java
cvssv3.1	5.3	https://github.com/aws/aws-encryption-sdk-java/security/advisories/GHSA-55xh-53m6-936r
cvssv4	6.9	https://github.com/aws/aws-encryption-sdk-java/security/advisories/GHSA-55xh-53m6-936r
generic_textual	MODERATE	https://github.com/aws/aws-encryption-sdk-java/security/advisories/GHSA-55xh-53m6-936r
cvssv3.1	5.3	https://nvd.nist.gov/vuln/detail/CVE-2024-23680
cvssv4	6.9	https://nvd.nist.gov/vuln/detail/CVE-2024-23680
generic_textual	MODERATE	https://nvd.nist.gov/vuln/detail/CVE-2024-23680
cvssv3.1	5.3	https://vulncheck.com/advisories/vc-advisory-GHSA-55xh-53m6-936r
cvssv4	6.9	https://vulncheck.com/advisories/vc-advisory-GHSA-55xh-53m6-936r
generic_textual	MODERATE	https://vulncheck.com/advisories/vc-advisory-GHSA-55xh-53m6-936r

Reference id	Reference type	URL
		https://github.com/aws/aws-encryption-sdk-java
CVE-2024-23680		https://nvd.nist.gov/vuln/detail/CVE-2024-23680
GHSA-55xh-53m6-936r		https://github.com/advisories/GHSA-55xh-53m6-936r
GHSA-55xh-53m6-936r		https://github.com/aws/aws-encryption-sdk-java/security/advisories/GHSA-55xh-53m6-936r
GHSA-gvc7-gjrw-hj65		https://github.com/advisories/GHSA-gvc7-gjrw-hj65
vc-advisory-GHSA-55xh-53m6-936r		https://vulncheck.com/advisories/vc-advisory-GHSA-55xh-53m6-936r

No exploits are available.

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Found at https://github.com/advisories/GHSA-55xh-53m6-936r

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Found at https://github.com/advisories/GHSA-55xh-53m6-936r

Attack Vector (AV)	Attack Complexity (AC)	Attack Requirements (AT)	Privileges Required (PR)	User Interaction (UI)	Vulnerable System Impact Confidentiality (VC)	Vulnerable System Impact Integrity (VI)	Vulnerable System Impact Availability (VA)	Subsequent System Impact Confidentiality (SC)	Subsequent System Impact Integrity (SI)	Subsequent System Impact Availability (SA)
network adjacent local physical	low high	none present	none low high	none passive active	high low none	high low none	high low none	high low none	high low none	high low none

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Found at https://github.com/aws/aws-encryption-sdk-java

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Found at https://github.com/aws/aws-encryption-sdk-java

Attack Vector (AV)	Attack Complexity (AC)	Attack Requirements (AT)	Privileges Required (PR)	User Interaction (UI)	Vulnerable System Impact Confidentiality (VC)	Vulnerable System Impact Integrity (VI)	Vulnerable System Impact Availability (VA)	Subsequent System Impact Confidentiality (SC)	Subsequent System Impact Integrity (SI)	Subsequent System Impact Availability (SA)
network adjacent local physical	low high	none present	none low high	none passive active	high low none	high low none	high low none	high low none	high low none	high low none

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Found at https://github.com/aws/aws-encryption-sdk-java/security/advisories/GHSA-55xh-53m6-936r

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Found at https://github.com/aws/aws-encryption-sdk-java/security/advisories/GHSA-55xh-53m6-936r

Attack Vector (AV)	Attack Complexity (AC)	Attack Requirements (AT)	Privileges Required (PR)	User Interaction (UI)	Vulnerable System Impact Confidentiality (VC)	Vulnerable System Impact Integrity (VI)	Vulnerable System Impact Availability (VA)	Subsequent System Impact Confidentiality (SC)	Subsequent System Impact Integrity (SI)	Subsequent System Impact Availability (SA)
network adjacent local physical	low high	none present	none low high	none passive active	high low none	high low none	high low none	high low none	high low none	high low none

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2024-23680

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Found at https://nvd.nist.gov/vuln/detail/CVE-2024-23680

Attack Vector (AV)	Attack Complexity (AC)	Attack Requirements (AT)	Privileges Required (PR)	User Interaction (UI)	Vulnerable System Impact Confidentiality (VC)	Vulnerable System Impact Integrity (VI)	Vulnerable System Impact Availability (VA)	Subsequent System Impact Confidentiality (SC)	Subsequent System Impact Integrity (SI)	Subsequent System Impact Availability (SA)
network adjacent local physical	low high	none present	none low high	none passive active	high low none	high low none	high low none	high low none	high low none	high low none

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Found at https://vulncheck.com/advisories/vc-advisory-GHSA-55xh-53m6-936r

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Found at https://vulncheck.com/advisories/vc-advisory-GHSA-55xh-53m6-936r

Attack Vector (AV)	Attack Complexity (AC)	Attack Requirements (AT)	Privileges Required (PR)	User Interaction (UI)	Vulnerable System Impact Confidentiality (VC)	Vulnerable System Impact Integrity (VI)	Vulnerable System Impact Availability (VA)	Subsequent System Impact Confidentiality (SC)	Subsequent System Impact Integrity (SI)	Subsequent System Impact Availability (SA)
network adjacent local physical	low high	none present	none low high	none passive active	high low none	high low none	high low none	high low none	high low none	high low none

No EPSS data available for this vulnerability.

Date	Actor	Action	Source	VulnerableCode Version
2026-06-11T20:33:37.774812+00:00	GHSA Importer	Import	https://github.com/advisories/GHSA-gvc7-gjrw-hj65	38.6.0