Amazon Advanced Jdbc Wrapper vulnerabilities

2 CVEs affecting Amazon Advanced Jdbc Wrapper, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-18061, published 2026-09-11.

More from Amazon.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-14265, published 2026-07-01. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Deserialization of untrusted data in the RemoteQueryCachePlugin in Amazon Web Services AWS Advanced JDBC Wrapper 3.3.0 through 4.0.0 might allow an actor with write access to the shared cache…
• CVE-2026-18061, published 2026-09-11. Medium severity, CVSS 5.9. EPSS: 0.3% chance of exploitation in the next 30 days. Improper restriction of XML external entity references in the RemoteQueryCachePlugin in AWS Advanced JDBC Wrapper 3.3.0 through 4.2.0 might allow an actor with write access to the shared cache…