Athena Odbc (Amazon) - vulnerabilities (CVEs)
6 CVEs, 0 in the last 30 days, 13 known versions, newest CVE from 2026-04-03. Vendor: Amazon.
CVEs of Athena Odbc
- CVE-2026-35560 - CVSS 9.1 (critical), 2026-04-03: Improper certificate validation in the identity provider connection components in Amazon Athena ODBC driver before 2.1.0.0 might allow a man-in-the-middle…
- CVE-2026-5485 - CVSS 7.8 (high), 2026-04-03: OS command injection in the browser-based authentication component in Amazon Athena ODBC driver before 2.0.5.1 on Linux might allow a threat actor to execute…
- CVE-2026-35562 - CVSS 8.7 (high), 2026-04-03: Allocation of resources without limits in the parsing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to cause a denial of…
- CVE-2026-35561 - CVSS 9.8 (critical), 2026-04-03: Insufficient authentication security controls in the browser-based authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat…
- CVE-2026-35559 - CVSS 7.1 (high), 2026-04-03: Out-of-bounds write in the query processing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to crash the driver by using…
- CVE-2026-35558 - CVSS 7.8 (high), 2026-04-03: Improper neutralization of special elements in the authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to execute…
