CVE-2024-55551

An issue was discovered in Exasol JDBC driver before 24.2.1 (2024-12-10). Attackers can inject malicious parameters into the JDBC URL, triggering JNDI injection during the process when the JDBC Driver uses this URL to connect to the database. This can further lead to remote code execution.

Scoring

Severity

HIGH

CVSS base score

8.3

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

EPSS probability

0.63%

CWE

CWE-471

Published

2025-03-19

Last modified

2026-03-13

Affected products

• Exasol JDBC driver

Weakness type

• CWE-471

Related vulnerabilities

• CVE-2026-50481 — Azure Active Directory Elevation of Privilege Vulnerability
• CVE-2026-54267 — Angular Client Hydration DOM Clobbering & Response-Cache Poisoning
• CVE-2026-44798 — Nautobot: GitRepository.current_head field should not be writable through REST API
• CVE-2026-8492 — Translate Drupal with GTranslate - Less critical - DOM clobbering / link manipulation - SA-CONTRIB-2026-035
• CVE-2025-33136 — IBM Aspera Faspex data modification
• CVE-2024-9876 — Application is vulnerable to Privilege escalation
• CVE-2024-45672 — IBM Security Verify Bridge data manipulation
• CVE-2024-51462 — IBM QRadar WinCollect Agent data manipulation

Markdown version · Browse all CVEs