| CVE-2026-49845 |
Apache Hive: SQL Injection vulnerability in HiveMetaStore partition-name direct-SQL paths
|
Not rated
|
Aug 25, 2026 |
| CVE-2026-55976 |
Server-Side Request Forgery (SSRF) in Avro SerDe schema resolution in Apache Hive before 4.2.1 allows an authenticated…
|
Not rated
|
Aug 25, 2026 |
| CVE-2026-53561 |
An improper authentication vulnerability in HiveServer2 SAML bearer-token validation in Apache Hive 4.0.0 through…
|
Not rated
|
Aug 25, 2026 |
| CVE-2025-62728 |
SQL injection vulnerability in Hive Metastore Server (HMS) when processing delete column statistics requests via the…
|
Not rated
|
Nov 26, 2025 |
| CVE-2024-29869 |
Hive creates a credentials file to a temporary directory in the file system with permissions 644 by default when the…
|
Not rated
|
Jan 28, 2025 |
| CVE-2024-23953 |
Use of Arrays.equals() in LlapSignerImpl in Apache Hive to compare message signatures allows attacker to forge a valid…
|
Not rated
|
Jan 28, 2025 |
| CVE-2024-23945 |
Signing cookies is an application security feature that adds a digital signature to cookie data to verify its…
|
Not rated
|
Dec 23, 2024 |
| CVE-2022-41137 |
Apache Hive Metastore (HMS) uses SerializationUtilities#deserializeObjectWithTypeInformation method when filtering and…
|
Not rated
|
Dec 5, 2024 |
| CVE-2023-35701 |
Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Hive
|
Not rated
|
May 3, 2024 |
| CVE-2021-34538 |
Apache Hive before 3.1.3 "CREATE" and "DROP" function operations does not check for necessary authorization of…
|
Not rated
|
Jul 16, 2022 |
| CVE-2020-1926 |
Apache Hive cookie signature verification used a non constant time comparison which is known to be vulnerable to…
|
Not rated
|
Mar 16, 2021 |
| CVE-2018-1314 |
In Apache Hive 2.3.3, 3.1.0 and earlier, Hive "EXPLAIN" operation does not check for necessary authorization of involved…
|
Not rated
|
Nov 8, 2018 |
| CVE-2018-11777 |
In Apache Hive 2.3.3, 3.1.0 and earlier, local resources on HiveServer2 machines are not properly protected against…
|
Not rated
|
Nov 8, 2018 |
| CVE-2018-1315 |
In Apache Hive 2.1.0 to 2.3.2, when 'COPY FROM FTP' statement is run using HPL/SQL extension to Hive, a…
|
Not rated
|
Apr 5, 2018 |
| CVE-2018-1284 |
In Apache Hive 0.6.0 to 2.3.2, malicious user might use any xpath UDFs…
|
Not rated
|
Apr 5, 2018 |
| CVE-2018-1282 |
This vulnerability in Apache Hive JDBC driver 0.7.1 to 2.3.2 allows carefully crafted arguments to be used to bypass the…
|
Not rated
|
Apr 5, 2018 |
| CVE-2017-12625 |
Apache Hive 2.1.x before 2.1.2, 2.2.x before 2.2.1, and 2.3.x before 2.3.1 expose an interface through which masking…
|
Not rated
|
Nov 1, 2017 |
| CVE-2016-3083 |
Apache Hive (JDBC + HiveServer2) implements SSL for plain TCP and HTTP connections (it supports both transport modes)
|
Not rated
|
May 30, 2017 |