- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 9 · 1 high, 1 medium
- Dependents
- 55
- Registry
- Maven Central
Advisories 9
- CVE-2026-53561High 7.4
Apache Hive: Unauthenticated authentication bypass in HiveServer2 HTTP SAML bearer-token validation allows impersonation of any Hive user
Affected: from 4.0.0, through 4.2.0.
- CVE-2024-23945Medium 5.9
Apache Hive, Apache Spark, Apache Spark: CookieSigner exposes the correct signature when message verification fails
Affected: from 1.2.0, fixed in 4.0.0; from 1.2.0, fixed in 4.0.0.
- CVE-2018-1315Unrated
In Apache Hive 2.1.0 to 2.3.2, when 'COPY FROM FTP' statement is run using HPL/SQL extension to Hive, a compromised/malicious FTP server…
Affected: from 2.1.0, fixed in 2.3.3.
- CVE-2018-1284Unrated
In Apache Hive 0.6.0 to 2.3.2, malicious user might use any xpath UDFs (xpath/xpath_string/xpath_boolean/xpath_number/xpath_double/xpath_fl…
Affected: from 0.6.0, fixed in 2.3.3.
- CVE-2017-12625Unrated
Apache Hive 2.1.x before 2.1.2, 2.2.x before 2.2.1, and 2.3.x before 2.3.1 expose an interface through which masking policies can be…
Affected: from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.
- CVE-2016-3083Unrated
Apache Hive (JDBC + HiveServer2) implements SSL for plain TCP and HTTP connections (it supports both transport modes).
Affected: fixed in 1.2.2; from 2.0.0, fixed in 2.0.1.
- CVE-2015-7521Unrated
The authorization framework in Apache Hive 1.0.0, 1.0.1, 1.1.0, 1.1.1, 1.2.0 and 1.2.1, on clusters protected by Ranger and…
Affected: from 1.0.0, fixed in 1.2.2.
- CVE-2015-1772Unrated
The LDAP implementation in HiveServer2 in Apache Hive before 1.0.1 and 1.1.x before 1.1.1, as used in IBM InfoSphere BigInsights 3.0…
Affected: from 1.0.0, fixed in 1.0.1; from 1.1.0, fixed in 1.1.1.
- CVE-2014-0228Unrated
Apache Hive before 0.13.1, when in SQL standards based authorization mode, does not properly check the file permissions for (1) import and…
Affected: fixed in 0.13.1.