CVE-2024-55551CWE-471

An issue was discovered in Exasol JDBC driver before 24.2.1 (2024-12-10)

High · published March 19, 2025

CVSS v3.1
8.3
EPSS
1%
Percentile
49.9
In the wild
Unconfirmed
What it is

An issue was discovered in Exasol JDBC driver before 24.2.1 (2024-12-10). Attackers can inject malicious parameters into the JDBC URL, triggering JNDI injection during the process when the JDBC Driver uses this URL to connect to the database. This can further lead to remote code execution.

The record
Technical detail
CVSS v3.1
8.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00637 · 49.9th percentile
Weakness
CWE-471 · Modification of Assumed-Immutable Data (MAID)
Published
2025-03-19T00:00Z
EPSS history
Timeline
  • 19 MAR 00:00Z
    An issue was discovered in Exasol JDBC driver before 24.2.1 (2024-12-10)
    cvelistv5