HIGHCVSS v3.1 8.1Vulnerability
CVE-2026-119084
Unsafe reflection in the connection parameter and credentials profile handling of Amazon Redshift JDBC Driver before 2.3.0 might allow an actor who can influence the JDBC connection URL or the AWS credentials profile to execute arbitrary code in the application context, provided a suitable class is available on the application classpath. To remediate this issue, users should upgrade to version 2.3.0 or later.
Properties
- Severity
- HIGH
- Nvd fetched at
- 2026-11-04T01:29:06.847378+00:00
- Cvss severity
- HIGH
- Cvss score
- 8.1
- Retrieved at
- 2026-11-04T01:30:00+00:00
- Score
- 8.1
- Cvss version
- 3.1
- Last source
- NVD
- Cve id
- CVE-2026-119084
- Cvss vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- First seen by Signal
- 2026-11-04T01:30:00+00:00
- Name
- CVE-2026-119084
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- Published at
- 2026-11-03T22:19:29.220
- Last modified
- 2026-11-03T22:19:29.220
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph