Aws Advanced Jdbc Wrapper
Approved changes feed: RSS · Atom
cpe:2.3:a:aws:aws_advanced_jdbc_wrapper:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Aws (e6707f00-6abb-51df-808c-9e3417305027) |
|---|---|
| Product | Aws Advanced Jdbc Wrapper (4bbd6796-46d4-557d-93ce-2472921c7a92) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-14265 |
vulnerable | 2026-07-29 00:26:16.909698 |
RCE via Deserialization in AWS Advanced JDBC Wrapper
HIGH (7.5)
Deserialization of untrusted data in the RemoteQueryCachePlugin in Amazon Web Services AWS Advanced JDBC Wrapper 3.3.0 through 4.0.0 might allow an actor with write access to the shared cache infrastructure to execute arbitrary code on application servers that read cached query results via a crafted serialized Java object. The RemoteQueryCachePlugin uses ObjectInputStream without class filtering when deserializing cached query results from Redis or Valkey, enabling gadget chain execution when cache entries are poisoned.
We recommend upgrading to AWS Advanced JDBC Wrapper version 4.0.1 or later.
Published: 2026-07-01T19:34:02.095Z
Updated: 2026-07-02T15:54:59.751Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-11400 |
vulnerable | 2026-06-08 07:47:14.130840 |
Privilege Escalation in AWS Advanced JDBC Wrapper for Amazon Aurora PostgreSQL
HIGH (8)
An untrusted search path issue in the GlobalDatabasePlugin in the AWS Advanced JDBC Wrapper for Amazon Aurora PostgreSQL will allow a remote authenticated low-privilege actor to escalate privileges to those of another Amazon RDS user, including rds_superuser, via a crafted function created by the actor that runs when that user connects to the cluster through an affected wrapper.
To remediate this issue, users should upgrade to AWS Advanced JDBC Wrapper version 4.0.1.
Published: 2026-06-05T19:07:02.459Z
Updated: 2026-06-09T15:14:00.416Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.