Aws Athena Query Federation Aws Athena Query Federation

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in Aws Athena Query Federation.

By the Year

In 2026 there have been 1 vulnerability in Aws Athena Query Federation with an average score of 6.8 out of ten.

Year Vulnerabilities Average Score
2026 1 6.80

It may take a day or so for new Aws Athena Query Federation vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Aws Athena Query Federation Security Vulnerabilities

AWS Athena Federation Synapse SQL Injection (Prev2026.21.1)
CVE-2026-12283 6.8 - Medium - July 17, 2026

Amazon Athena is a serverless, interactive query service that lets you analyze data directly in Amazon S3 using standard SQL. Athena Query Federation is a feature that allows you to connect to data sources outside of Amazon S3 like DynamoDB, Azure Synapse, and custom connectors using standard SQL syntax. Improper neutralization of special elements used in an SQL command in the Synapse connector in Amazon aws-athena-query-federation v2022.20.1 through v2026.19.1 might allow an authenticated remote user to execute injected read-only SQL queries that return unintended data from the connected database via a crafted table name. To remediate this issue, users should upgrade to version v2026.21.1 or later.

SQL Injection

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for Aws Athena Query Federation or by Aws? Click the Watch button to subscribe.

Aws
Vendor

subscribe