Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: Snowflake Component: Snowflake Jdbc Clear all filters
TI-2025-20331 CVE-2025-27496 · GHSA-q298-375f-5q63

Snowflake JDBC Driver client-side encryption key in DEBUG logs

Priority LOW 15

Snowflake, a platform for using artificial intelligence in the context of cloud computing, has a vulnerability in the Snowflake JDBC driver ("Driver") in versions 3.0.13 through 3.23.0 of the driver.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00117 Published 2025-03-13 Fixed in 3.23.1 CWE-532
TI-2025-18506 CVE-2025-24789 · GHSA-7hpq-3g6w-pvhf

Snowflake JDBC allows an untrusted search path on Windows

Priority LOW 36

Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00256 Published 2025-01-29 Fixed in 3.22.0 CWE-426
TI-2024-29031 CVE-2024-43382 · GHSA-f686-hw9c-xw9c

Snowflake JDBC driver versions >= 3.2.6 and <= 3.19.1 have an Incorrect Security Setting…

Priority LOW 28

Snowflake JDBC driver versions >= 3.2.6 and <= 3.19.1 have an Incorrect Security Setting that can result in data being uploaded to an encrypted stage without the additional layer of protection provided by client side enc…

CVSS 3.1MEDIUM 5.9 Network High privileges No interaction EPSS 0.00176 Published 2024-10-30 Fixed in 3.20.0 CWE-326