Amazon Vulnerabilities and Affected Products
Vulnerabilities associated with EMR.
Products
Clear product- Amazon Athena ODBC driver6 vulnerabilities
- data.all5 vulnerabilities
- Amazon Redshift JDBC Driver2 vulnerabilities
- Fire TV Stick 3rd gen2 vulnerabilities
- WorkSpaces Client2 vulnerabilities
- Amazon Ion Dotnet1 vulnerability
- Amazon Music Player1 vulnerability
- Amazon Redshift ODBC Driver1 vulnerability
- Amazon Redshift Python Connector1 vulnerability
- Amazon WorkSpaces1 vulnerability
- Amazon.ApplicationLoadBalancer.Identity.AspNetCore Middleware1 vulnerability
- Amazon.IonDotnet1 vulnerability
- Amplify Studio1 vulnerability
- AppStream 2.0 Client1 vulnerability
- Aurora MySQL1 vulnerability
- AWS ALB Route Directive Adapter For Istio1 vulnerability
- AWS EFS CSI Driver1 vulnerability
- AWS SDK1 vulnerability
- aws-dataall1 vulnerability
- aws-load-balancer-controller1 vulnerability
- aws_alb_route_directive_adapter_for_istio1 vulnerability
- aws_client_vpn1 vulnerability
- Blink XT2 Sync Module firmware1 vulnerability
- Cloud Cam1 vulnerability
- DCV Client1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-8904CRITICAL | Privilege escalation issue in Amazon EMR Secret Agent componentAmazon EMR Secret Agent creates a keytab file containing Kerberos credentials. This file is stored in the /tmp/ directory. A user with access to this directory and another account can potentially decrypt the keys and escalate to higher privileges. Users are advised to upgrade to Amazon EMR version 7.5 or higher. For Amazon EMR releases between 6.10 and 7.4, we strongly recommend that you run the bootstrap script and RPM files with the fix provided in the location below. CWE-257Aug 13, 2025 | CVSS9.0v4.0 | EPSS0.333% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |