| CVE-2026-93684 |
An SQL user using Impala up to and including version 4.5.2 with only SELECT permission can put JavaScript in a table…
|
Not rated
|
Oct 7, 2026 |
| CVE-2026-90466 |
Path traversal of 'trusted_jar_paths' in Impala 4.5.2 allows an attacker-controlled JAR to be loaded via a relative path…
|
Not rated
|
Oct 7, 2026 |
| CVE-2026-97720 |
Incorrect implementation of JWT/OAuth authentication in Impala executors in Apache Impala versions up to and including…
|
Not rated
|
Oct 7, 2026 |
| CVE-2026-65181 |
Insufficient authorization of Data Source tables in Impala 2.7-4.5 allows a client with privileges to upload a file to…
|
Not rated
|
Sep 9, 2026 |
| CVE-2026-57866 |
Server side request forgery in Apache Impala versions 4.4.x and 4.5.x. Authenticated Impala users with permissions to…
|
Not rated
|
Sep 9, 2026 |
| CVE-2026-56207 |
Signature of Bearer token is not verified in last step of SAML2 authentication for Impala's hs2-http interface, allowing…
|
Not rated
|
Sep 9, 2026 |
| CVE-2026-54048 |
Specifying tblproperties('avro.schema.url'=' http://...' ) or with a 'file:///' URI on a table in Impala 2.0.0 to…
|
Not rated
|
Sep 9, 2026 |
| CVE-2021-28131 |
Impala sessions use a 16 byte secret to verify that the session is not being hijacked by another user
|
Not rated
|
Jul 22, 2021 |
| CVE-2018-11785 |
Missing authorization check in Apache Impala before 3.0.1 allows a Kerberos-authenticated but unauthorized user to…
|
Not rated
|
Oct 24, 2018 |
| CVE-2018-11792 |
In Apache Impala before 3.0.1, ALTER TABLE/VIEW RENAME required ALTER on the old table
|
Not rated
|
Oct 24, 2018 |
| CVE-2017-9792 |
In Apache Impala (incubating) before 2.10.0, a malicious user with "ALTER" permissions on an Impala table can access any…
|
Not rated
|
Oct 3, 2017 |
| CVE-2017-5652 |
During a routine security analysis, it was found that one of the ports in Apache Impala (incubating) 2.7.0 to 2.8.0 sent…
|
Not rated
|
Jul 10, 2017 |
| CVE-2017-5640 |
It was noticed that a malicious process impersonating an Impala daemon in Apache Impala (incubating) 2.7.0 to 2.8.0…
|
Not rated
|
Jul 10, 2017 |