Approved changes feed: RSS · Atom

cpe:2.3:a:amazon:amazon_redshift_jdbc_driver:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAmazon (0ed129a9-8e26-53dc-aefe-55957e638c30)
ProductAmazon Redshift Jdbc Driver (56bfd276-94a5-5261-aa24-261bca5a449d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-8178 not_vulnerable 2026-06-08 08:08:58.168454 Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver
HIGH (8.1)
An issue exists in Amazon Redshift JDBC Driver versions prior to 2.2.2. Under certain conditions, the driver could load and execute arbitrary classes when processing JDBC connection URL parameters. An actor who can influence the connection URL could potentially execute code in the application context, provided a suitable class is available on the application's classpath. To mitigate this issue, users should upgrade to version 2.2.2 or later.
Published: 2026-05-08T18:36:46.950Z
Updated: 2026-05-08T20:06:28.690Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12744 vulnerable 2026-06-08 06:25:36.012902 SQL Injection in the Amazon Redshift JDBC Driver affecting v2.1.0.31
HIGH (8)
A SQL injection in the Amazon Redshift JDBC Driver in v2.1.0.31 allows a user to gain escalated privileges via the getSchemas, getTables, or getColumns Metadata APIs. Users should upgrade to the driver version 2.1.0.32 or revert to driver version 2.1.0.30.
Published: 2024-12-24T16:12:51.304Z
Updated: 2025-10-14T18:59:16.572Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.