CVE-2018-1282

CRITICAL · CVSS 9.1 EPSS 5.73%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-04-05 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2018-1282

Severity

CRITICAL

CVSS

9.1

EPSS

5.73%

Apache

Original Filing — NVD Description

This vulnerability in Apache Hive JDBC driver 0.7.1 to 2.3.2 allows carefully crafted arguments to be used to bypass the argument escaping/cleanup that JDBC driver does in PreparedStatement implementation.