High
CVE-2025-62728
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 18
Reset filters
Medium
CVE-2024-29869
Apache Hive Incorrectly Assigns Permissions for a Critical Resource
Medium
CVE-2024-23953
Apache Hive vulnerable to Observable Timing Discrepancy and Authentication Bypass by Spoofing
High
CVE-2024-23945
Apache Hive and Spark: CookieSigner exposes the correct signature when message verification fails
High
CVE-2022-41137
Apache Hive: Deserialization of untrusted data when fetching partitions from the Metastore
Medium
CVE-2023-35701
Apache Hive Code Injection vulnerability
High
CVE-2021-34538
Apache Hive before 3.1.3 `CREATE` and `DROP` function operations do not check for necessary authorization.
Medium
CVE-2020-1926
Apache Hive Information Exposure and Observable Timing Discrepancy
High
CVE-2015-1772
Improper Authentication in org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service
High
CVE-2016-3083
org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service vulnerable to Improper Certificate Validation
Medium
CVE-2017-12625
Moderate severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service
High
CVE-2018-11777
Improper Authentication in hive:hive-exec
Medium
CVE-2018-1314
Moderate severity vulnerability that affects org.apache.hive:hive-jdbc
Critical
CVE-2018-1282
SQL Injection in hive-jdbc
Low
CVE-2018-1284
Exposure of Sensitive Information to an Unauthorized Actor in Apache hive
Low
CVE-2018-1315
Incorrect Permission Assignment for Critical Resource in Apache hive
High
CVE-2015-7521
High severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service
Low
CVE-2014-0228
Low severity vulnerability that affects org.apache.hive:hive-exec, org.apache.hive:hive, and org.apache.hive:hive-service
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.