Vulnerability DatabaseGHSA-7xw4-g7mm-r4hh

GHSA-7xw4-g7mm-r4hh
Java vulnerability analysis and mitigation

Description of Vulnerability:

An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rds_superuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service (RDS) users. AWS recommends for customers to upgrade to the following versions: AWS JDBC Wrapper to v2.6.5 or greater.

Source of Vulnerability Report:

Allistair Ishmael Hakim allistair.hakim@gmail.com

Affected products & versions:

AWS JDBC Wrapper < 2.6.5

Platforms:

MacOS/Windows/Linux


SourceNVD

Related Java vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2025-64099HIGH8.1
  • JavaJava
  • org.openidentityplatform.openam:openam-oauth2
NoYesNov 12, 2025
GHSA-7xw4-g7mm-r4hhHIGH8
  • JavaJava
  • software.amazon.jdbc:aws-advanced-jdbc-wrapper
NoYesNov 13, 2025
CVE-2025-64518HIGH7.5
  • JavaJava
  • org.cyclonedx:cyclonedx-core-java
NoYesNov 10, 2025
CVE-2025-11538MEDIUM6.8
  • JavaJava
  • keycloak
NoYesNov 13, 2025
CVE-2025-10713MEDIUM6.5
  • JavaJava
  • org.wso2.carbon.mediation:org.wso2.carbon.localentry
NoYesNov 05, 2025

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management