← Back

CVE-2024-55551

nvd nist
Published: Mar 19, 2025Modified: Jun 17, 2026

JSON object

Loading...
8.3
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Exploitability: 1.6 / Impact: 6.0
Source: MITRE (Secondary)

Description

An issue was discovered in Exasol JDBC driver before 24.2.1 (2024-12-10). Attackers can inject malicious parameters into the JDBC URL, triggering JNDI injection during the process when the JDBC Driver uses this URL to connect to the database. This can further lead to remote code execution.

Affected (1)

Products: Exasol: Jdbc Driver
Exasol
1 product
Jdbc Driver
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Jdbc Driver
Before 24.2.1

Related CWEs

CWE-471
Modification of Assumed-Immutable Data (MAID)
The product does not properly protect an assumed-immutable element from being modified by an attacker.

References (4)

Source: cve@mitre.org
Release Notes
Source: cve@mitre.org
Product
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Technical Description

Timeline

No history available yet.