insightsoftware Hive JDBC Remote Code Execution Vulnerability
Vulnerability
A remote code execution vulnerability exists in the insightsoftware Hive JDBC driver in versions through 2.6.13. This issue arises from the ability of attackers to inject malicious parameters into the JDBC URL. When the JDBC driver uses this URL to connect to the database, it triggers JNDI injection, which can be exploited to execute remote code.
Impact
Exploitation of this vulnerability allows for remote code execution on the server where the JDBC driver is used.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
7.4remediation
0.0relevance
0.0threat
0.1urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.