Amazon Web Services Redshift Java Database Connectivity Driver vulnerabilities

2 CVEs affecting Amazon Web Services Redshift Java Database Connectivity Driver, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-12744, published 2024-12-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-41828, published 2022-09-29. High severity, CVSS 8.1. EPSS: 1.9% chance of exploitation in the next 30 days. In Amazon AWS Redshift JDBC Driver (aka amazon-redshift-jdbc-driver or redshift-jdbc42) before 2.1.0.8, the Object Factory does not check the class type when instantiating an object from a class name.
CVE-2024-12744, published 2024-12-24. High severity, CVSS 8.0. EPSS: 0.6% chance of exploitation in the next 30 days. A SQL injection in the Amazon Redshift JDBC Driver in v2.1.0.31 allows a user to gain escalated privileges via the getSchemas, getTables, or getColumns Metadata APIs. Users should upgrade to the…