Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.hive/hive-jdbc@2.2.0
purl pkg:maven/org.apache.hive/hive-jdbc@2.2.0
Next non-vulnerable version 2.3.4
Latest non-vulnerable version 4.0.0
Risk 4.5
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-bhp4-12yw-bqdn
Aliases:
CVE-2017-12625
GHSA-2g9q-chq2-w8qw
Information Exposure Apache Hive expose an interface through which masking policies can be defined on tables or views, e.g., using Apache Ranger. When a view is created over a given table, the policy enforcement does not happen correctly on the table for masked columns.
2.3.1
Affected by 2 other vulnerabilities.
VCID-gqah-8x44-a3c9
Aliases:
CVE-2018-1282
GHSA-jf2m-435m-mxw8
2.3.3
Affected by 1 other vulnerability.
VCID-jq4c-tghp-s3c8
Aliases:
CVE-2018-1314
GHSA-jmf4-pq78-f8vj
Missing Authorization The Hive `EXPLAIN` operation does not check for necessary authorization of involved entities in a query. An unauthorized user can do `EXPLAIN` on arbitrary table or view and expose table metadata and statistics.
2.3.4
Affected by 0 other vulnerabilities.
3.1.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-31T09:52:02.552142+00:00 GitLab Importer Affected by VCID-jq4c-tghp-s3c8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.hive/hive-jdbc/CVE-2018-1314.yml 38.6.0
2026-05-31T09:44:07.485370+00:00 GitLab Importer Affected by VCID-gqah-8x44-a3c9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.hive/hive-jdbc/CVE-2018-1282.yml 38.6.0
2026-05-30T20:53:13.402357+00:00 GitLab Importer Affected by VCID-bhp4-12yw-bqdn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.hive/hive-jdbc/CVE-2017-12625.yml 38.6.0