Login Request a demo
HI
Product
Hive
by Apache · last CVE Aug 25, 2026
23
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities23In the news0Timeline
Severity mix
Critical 4High 8Medium 8Low 2
Severity
All severities23Critical4High8Medium8Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Hive to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-49845
9.8
1%
Aug 25
Apache Hive: SQL Injection vulnerability in HiveMetaStore partition-name direct-SQL paths
Affected: 4.2.0
CVE-2018-21234
9.8
8%
May 21
Jodd before 5.0.4 performs Deserialization of Untrusted JSON Data when setClassMetadataName is set
Affected: 3.1.2
CVE-2026-55976
9.1
1%
Aug 25
Apache Hive: SSRF vulnerability in Hive Avro Serde due to Insufficient input validation on avro.schema.url
Affected: 4.2.0
CVE-2018-1282
9.1
5%
Apr 5
This vulnerability in Apache Hive JDBC driver 0.7.1 to 2.3.2 allows carefully crafted arguments to be used to bypass the argument escaping/cleanup that JDBC driver does in…
Affected: 0.7.1 through 2.3.2
Showing 4