CVE-2022-29972: Insightsoftware Magnitude Simba Amazon Redshift Odbc Driver

High severity, CVSS 7.8. EPSS: 3.7% chance of exploitation in the next 30 days.

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift ODBC Driver (1.4.14 through 1.4.21.1001 and 1.4.22 through 1.4.x before 1.4.52) may allow a local user to execute arbitrary code.

Affected products

• Insightsoftware Magnitude Simba Amazon Redshift Odbc Driver: from 1.4.11, up to and including 1.4.21.1001; from 1.4.22, before 1.4.52 (fixed in 1.4.52)

Published 2022-05-09. Last modified 2026-06-17.