CVE-2022-30240: Insightsoftware Magnitude Simba Amazon Redshift Jdbc Driver

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift JDBC Driver 1.2.40 through 1.2.55 may allow a local user to execute code. NOTE: this is different from CVE-2022-29972.

Affected products

  • Insightsoftware Magnitude Simba Amazon Redshift Jdbc Driver: from 1.2.40, before 1.2.56 (fixed in 1.2.56)

Published 2022-05-09. Last modified 2026-06-17.