Advisories · Technology
AWS loom.
Every CVE that names AWS loom among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.3 High
Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS
- AWS loom
- Server-side request forgery (SSRF)
- CVSS 8.2 High
Server-side request forgery in the OAuth2 discovery handling in Loom for AWS
- AWS loom
- Information disclosure
- Server-side request forgery (SSRF)
- CVSS 10.0 CriticalCritical · CVSS 9+
Missing authentication for critical function in Loom for AWS
- AWS loom
- Authentication bypass
- CWE-1188