AWS Advanced JDBC Wrapper vulnerabilities

2 known vulnerabilities in AWS Advanced JDBC Wrapper from AWS. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  AWS Advanced JDBC Wrapper: Deserialization of Untrusted Data

  CVE-2026-14265Jul 1, 2026AWS

  Deserialization of untrusted data in the RemoteQueryCachePlugin in Amazon Web Services AWS Advanced JDBC Wrapper 3.3.0 through 4.0.0 might allow an actor with write access to the shared cache infrastructure to execute arbitrary code on application servers that

• 8.0 High severity

  AWS Advanced JDBC Wrapper: Untrusted Search Path

  CVE-2026-11400Jun 5, 2026AWS

  An untrusted search path issue in the GlobalDatabasePlugin in the AWS Advanced JDBC Wrapper for Amazon Aurora PostgreSQL will allow a remote authenticated low-privilege actor to escalate privileges to those of another Amazon RDS user, including rds_superuser,