What is CVE-2024-45198?

CVE-2024-45198 is a high-severity vulnerability in N/a, classified under Code Injection. CVSS score: 8.8/10. Published 2025-04-03.

How severe is CVE-2024-45198?

High severity. CVSS v3 base score is 8.8 out of 10.

RCE in N/a

CVE-2024-45198

insightsoftware Spark JDBC 2.6.21 has a remote code execution vulnerability. Attackers can inject malicious parameters into the JDBC URL, triggering JNDI injection during the process when the JDBC Driver uses this URL to connect to the database. This can further lead to remote code execution.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.006 (43.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

N/a — versions n/a

Weakness classification (CWE)

CWE-94 — Code Injection

References

cve@mitre.org

Frequently asked questions

What is CVE-2024-45198?: CVE-2024-45198 is a high-severity vulnerability in N/a, classified under Code Injection. CVSS score: 8.8/10. Published 2025-04-03.
How severe is CVE-2024-45198?: High severity. CVSS v3 base score is 8.8 out of 10.