Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Priority LOW 34

Improper neutralization of special elements in the authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to execute arbitrary code or redirect authentication flows by using spec…

CVSS 4.0HIGH 7.3 Local No auth User interaction EPSS 0.00279 Published 2026-04-03 Fixed in 2.1.0.0 CWE-77
Priority LOW 31

Out-of-bounds write in the query processing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to crash the driver by using specially crafted data that is processed by the driver during que…

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00281 Published 2026-04-03 Fixed in 2.1.0.0 CWE-787
Priority LOW 36

OS command injection in the browser-based authentication component in Amazon Athena ODBC driver before 2.0.5.1 on Linux might allow a threat actor to execute arbitrary code by using specially crafted connection parameter…

CVSS 4.0HIGH 7.3 Local No auth User interaction EPSS 0.00917 Published 2026-04-03 Fixed in 2.0.5.1 CWE-78
Priority MEDIUM 44

Allocation of resources without limits in the parsing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to cause a denial of service by delivering crafted input that triggers excessive res…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00386 Published 2026-04-03 Fixed in 2.1.0.0 CWE-770
Priority MEDIUM 42

Insufficient authentication security controls in the browser-based authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to intercept or hijack authentication sessions due to in…

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00509 Published 2026-04-03 Fixed in 2.1.0.0 CWE-862
Priority MEDIUM 41

Improper certificate validation in the identity provider connection components in Amazon Athena ODBC driver before 2.1.0.0 might allow a man-in-the-middle threat actor to intercept authentication credentials due to insuf…

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.0028 Published 2026-04-03 Fixed in 2.1.0.0 CWE-295