Skip to content
OpenAdvisories

Package · Maven

org.apache.hive:hive-jdbc

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.6
    CVE-2023-35701

    Apache Hive: Arbitrary command execution via JDBC driver

    Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Hive. The vulnerability affects the Hive JDBC driver component and it can potentially lead to arbitrary code execution on the machine/endpoint that the JDBC driver (client) is r…

    Apache Software Foundation Apache Hive org.apache.hive:hive-jdbc Maven
  • Medium 4.3
    CVE-2018-1314

    Moderate severity vulnerability that affects org.apache.hive:hive-jdbc

    In Apache Hive 2.3.3, 3.1.0 and earlier, Hive "EXPLAIN" operation does not check for necessary authorization of involved entities in a query. An unauthorized user can do "EXPLAIN" on arbitrary table or view and expose table metadata and statistics.

    Apache Software Foundation Apache Hive org.apache.hive:hive-jdbc Maven