CVE-2018-1282

CVE-2018-1282: vulnerability in Apache Hive

Published · Updated

Follow this CVE+ Monitor Apache Hive+ Monitor org.apache.hive:hive-jdbc

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 5.5%
This vulnerability in Apache Hive JDBC driver 0.7.1 to 2.3.2 allows carefully crafted arguments to be used to bypass the argument escaping/cleanup that JDBC driver does in PreparedStatement implementation.
Affected products
Apache Software Foundation · Apache Hive
Related CVEs — Apache Hive

In the same product, most dangerous first.

CVE-2020-1926—Timing attack in Cookie signature verificationEPSS 2.5%CVE-2018-11777—CVE-2018-11777EPSS 2.3%CVE-2018-1284—CVE-2018-1284EPSS 2.1%CVE-2018-1314—CVE-2018-1314EPSS 2.0%CVE-2021-34538—Apache Hive Security vulnerability in Hive with UDFsEPSS 1.9%CVE-2018-1315—CVE-2018-1315EPSS 1.7%