← Back

Amazon Web Services Redshift Java Database Connectivity Driver

amazon_web_services_redshift_java_database_connectivity_driver

Vendor: Amazon • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-12744
1Amazon
1Amazon Web Services Redshift Java Database Connectivity Driver
Jun 17, 2026
Dec 24, 2024
8.6 HIGH· v4
8.0 HIGH· v3
N/A· v2
A SQL injection in the Amazon Redshift JDBC Driver in v2.1.0.31 allows a user to gain escalated privileges via the getSchemas, getTables, or getColumns Metadata APIs. Users should upgrade to the driver version 2.1.0.32 o...Show more
A SQL injection in the Amazon Redshift JDBC Driver in v2.1.0.31 allows a user to gain escalated privileges via the getSchemas, getTables, or getColumns Metadata APIs. Users should upgrade to the driver version 2.1.0.32 or revert to driver version 2.1.0.30.Show less
CVE-2022-41828
1Amazon
1Amazon Web Services Redshift Java Database Connectivity Driver
Jun 17, 2026
Sep 29, 2022
N/A· v4
8.1 HIGH· v3
N/A· v2
In Amazon AWS Redshift JDBC Driver (aka amazon-redshift-jdbc-driver or redshift-jdbc42) before 2.1.0.8, the Object Factory does not check the class type when instantiating an object from a class name.