CVE-2024-45199

insightsoftware Hive JDBC through 2.6.13 has a remote code execution vulnerability

High · published April 3, 2025

CVSS v3.1
8.8
EPSS
1%
Percentile
49.0
In the wild
Unconfirmed
What it is

insightsoftware Hive JDBC through 2.6.13 has a remote code execution vulnerability. Attackers can inject malicious parameters into the JDBC URL, triggering JNDI injection during the process when the JDBC Driver uses this URL to connect to the database. This can further lead to remote code execution.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00619 · 49.0th percentile
Published
2025-04-03T00:00Z
EPSS history
Timeline
  • 03 APR 00:00Z
    insightsoftware Hive JDBC through 2.6.13 has a remote code execution vulnerability
    cvelistv5