Vulnerability in Amazon Opensearch_data_prepper
CVE-2025-62371
OpenSearch Data Prepper as an open source data collector for observability data. In versions prior to 2.12.2, the OpenSearch sink and source plugins in Data Prepper trust all SSL certificates by default when no certificate path is provided…
Vulnerability class: Improper Certificate Validation
EPSS: 0.002 (7.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.4 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N.
Affected products
- Amazon Opensearch_data_prepper
- Opensearch-project Data-prepper — versions < 2.12.2
Weakness classification (CWE)
Public proof-of-concept exploits
References
- security-advisories@github.com (x_refsource_CONFIRM, Vendor Advisory)
- security-advisories@github.com (Patch, x_refsource_MISC)
- security-advisories@github.com (Patch, x_refsource_MISC)
- security-advisories@github.com (Patch, x_refsource_MISC)
Frequently asked questions
- What is CVE-2025-62371?
- CVE-2025-62371 is a high-severity vulnerability in Amazon Opensearch_data_prepper, classified under Improper Certificate Validation. CVSS score: 7.4/10. Published 2025-10-15.
- How severe is CVE-2025-62371?
- High severity. CVSS v3 base score is 7.4 out of 10.
- Is CVE-2025-62371 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.