Approved changes feed: RSS · Atom

cpe:2.3:a:amazon:redshift_odbc_driver:2.1.5.0:*:*:*:*:*:*:*

part: a version: 2.1.5.0 update: *

VendorAmazon (0ed129a9-8e26-53dc-aefe-55957e638c30)
ProductRedshift Odbc Driver (063ac6b9-b962-5a17-b2e7-7a667d0c03f2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/aws/amazon-redshift-odbc-driver purl2cpe 2026-06-01 10:12:13.260623

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-12746 vulnerable 2026-06-08 06:25:36.018947 SQL Injection in the Amazon Redshift ODBC Driver affecting v2.1.5.0
HIGH (8)
A SQL injection in the Amazon Redshift ODBC Driver v2.1.5.0 (Windows or Linux) allows a user to gain escalated privileges via the SQLTables or SQLColumns Metadata APIs. Users are recommended to upgrade to the driver version 2.1.6.0 or revert to driver version 2.1.4.0.
Published: 2024-12-24T16:16:37.499Z
Updated: 2025-10-14T18:56:10.073Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.