Package · Maven

org.apache.hive:hive-common

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Medium 5.4

CVE-2025-62728

Apache Hive: SQL injection vulnerability when processing delete column statistics requests via the HMS Thrift APIs

SQL injection vulnerability in Hive Metastore Server (HMS) when processing delete column statistics requests via the Thrift APIs. The vulnerability is only exploitable by trusted/authorized users/applications that are allowed to call directly the Thrift APIs.…

Apache Software Foundation Apache Hive org.apache.hive:hive-metastore org.apache.hive:hive-common Maven

Nov 26, 2025