Snowflake

Records56All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high27CVSS 7.0–8.9

Exploited now

Snowflake records in CISA KEV

No Snowflake vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Snowflake Connector 13 records HIGH Snowflake Cli 7 records MEDIUM Snowflake Jdbc 6 records MEDIUM Streamlit 5 records MEDIUM Connector For C/c++ 2 records LOW Gosnowflake 2 records MEDIUM T3blog 2 records LOW Snowflake Hive Metastore Connector 1 record LOW

Records

6 records in Snowflake Jdbc · all components

TI-2026-02844 CVE-2026-3293 · GHSA-gx6c-pv62-9mcf

snowflakedb snowflake-jdbc JDBC URL SdkProxyRoutePlanner.java SdkProxyRoutePlanner redos

MEDIUM 55

A weakness has been identified in snowflakedb snowflake-jdbc up to 4.0.1.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00259 Published 2026-02-27 Fix deferred CWE-1333

TI-2023-14370 CVE-2023-30535 · GHSA-4g3j-c4wg-6j7x

Snowflake JDBC vulnerable to command injection via SSO URL authentication

MEDIUM 43

Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01668 Published 2023-04-14 Fixed in 3.13.29 CWE-20

TI-2025-18506 CVE-2025-24789 · GHSA-7hpq-3g6w-pvhf

Snowflake JDBC allows an untrusted search path on Windows

LOW 36

Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00256 Published 2025-01-29 Fixed in 3.22.0 CWE-426

TI-2024-29031 CVE-2024-43382 · GHSA-f686-hw9c-xw9c

Snowflake JDBC driver versions >= 3.2.6 and <= 3.19.1 have an Incorrect Security Setting…

LOW 28

Snowflake JDBC driver versions >= 3.2.6 and <= 3.19.1 have an Incorrect Security Setting that can result in data being uploaded to an encrypted stage without the additional layer of protection provided by client side enc…

CVSS 3.1MEDIUM 5.9 Network High privileges No interaction EPSS 0.00176 Published 2024-10-30 Fixed in 3.20.0 CWE-326

TI-2025-18507 CVE-2025-24790 · GHSA-33g6-495w-v8j2

Snowflake JDBC uses insecure temporary credential cache file permissions

LOW 24

Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00191 Published 2025-01-29 Fixed in 3.22.0 CWE-276

TI-2025-20331 CVE-2025-27496 · GHSA-q298-375f-5q63

Snowflake JDBC Driver client-side encryption key in DEBUG logs

LOW 15

Snowflake, a platform for using artificial intelligence in the context of cloud computing, has a vulnerability in the Snowflake JDBC driver ("Driver") in versions 3.0.13 through 3.23.0 of the driver.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00117 Published 2025-03-13 Fixed in 3.23.1 CWE-532

Open these records in search →