Skip to content
OpenAdvisories

Package · Maven

com.amazon.redshift:redshift-jdbc42

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • High 8.1
    CVE-2026-8178

    Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver

    An issue exists in Amazon Redshift JDBC Driver versions prior to 2.2.2. Under certain conditions, the driver could load and execute arbitrary classes when processing JDBC connection URL parameters. An actor who can influence the connection URL could potential…

    amazon Amazon Redshift JDBC Driver com.amazon.redshift:redshift-jdbc42 Maven
  • High 8.0
    CVE-2024-12744

    SQL Injection in the Amazon Redshift JDBC Driver affecting v2.1.0.31

    A SQL injection in the Amazon Redshift JDBC Driver in v2.1.0.31 allows a user to gain escalated privileges via the getSchemas, getTables, or getColumns Metadata APIs. Users should upgrade to the driver version 2.1.0.32 or revert to driver version 2.1.0.30.

    amazon Amazon Redshift JDBC Driver com.amazon.redshift:redshift-jdbc42 Maven
  • Critical 10.0
    CVE-2024-32888

    Amazon JDBC Driver for Redshift SQL Injection via line comment generation

    The Amazon JDBC Driver for Redshift is a Type 4 JDBC driver that provides database connectivity through the standard JDBC application program interfaces (APIs) available in the Java Platform, Enterprise Editions. Prior to version 2.1.0.28, SQL injection is po…

    AWS amazon-redshift-jdbc-driver trino trino-plugin-opensearch Wolfi Maven
  • High 8.8
    CVE-2022-41828 Public exploit

    com.amazon.redshift:redshift-jdbc42 vulnerable to remote command execution

    In Amazon AWS Redshift JDBC Driver (aka amazon-redshift-jdbc-driver or redshift-jdbc42) before 2.1.0.8, the Object Factory does not check the class type when instantiating an object from a class name.

    com.amazon.redshift:redshift-jdbc42 Maven