AH
Product
Apache Hive
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 1Low 0
Watch
Add Apache Hive to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-49845 | 9.8 | Aug 25 | Apache Hive: SQL Injection vulnerability in HiveMetaStore partition-name direct-SQL paths Affected: 4.0.0 through 4.2.0 |
| CVE-2026-55976 | 9.1 | Aug 25 | Apache Hive: SSRF vulnerability in Hive Avro Serde due to Insufficient input validation on avro.schema.url Affected: 2.1.0 through 4.2.0 |
| CVE-2026-53561 | 7.4 | Aug 25 | Apache Hive: Unauthenticated authentication bypass in HiveServer2 HTTP SAML bearer-token validation allows impersonation of any Hive user Affected: 4.0.0 through 4.2.0 |
| CVE-2024-23945 | 5.9 | Dec 23 | Apache Hive, Apache Spark, Apache Spark: CookieSigner exposes the correct signature when message verification fails Affected: 1.2.0 before 4.0.0 |
Showing 4