CVE-2022-29972

CVSS 3.1: 7.8 high
EPSS: 4%p89
Published: May 9, 2022 · May 9, 2022
Modified: Jun 17, 2026

Analyze CVE-2022-29972 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift ODBC Driver (1.4.14 through 1.4.21.1001 and 1.4.22 through 1.4.x before 1.4.52) may allow a local user to execute arbitrary code.

Vendors: insightsoftware

Products: magnitude simba amazon redshift odbc driver

Weakness: CWE-88

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.7%)

In the news

10 stories

Microsoft fixes Follina and 55 other CVEs

Help Net SecurityJul 12, 17:26 UTC · Jul 12, 2022VulnerabilityCVE-2022-30190 CVE-2022-30136 CVE-2022-30163+32

Technical Details Released for 'SynLapse' RCE Vulnerability Reported in Microsoft Azure

The Hacker NewsJun 15, 00:00 UTC · Jun 15, 2022VulnerabilityCVE-2022-299723 · 1 read

Week in review: F5 BIG-IP RCE exploitation, URL spoofing flaws in Zoom, Google Docs

Help Net SecurityMay 15, 00:00 UTC · May 15, 2022VulnerabilityExploitedCVE-2022-26925 CVE-2022-29972 CVE-2022-22713+22 · 1 read

Microsoft patches Windows LSA spoofing zero-day under active attack (CVE-2022-26925)

Help Net SecurityMay 12, 08:27 UTC · May 12, 2022Exploit / PoCExploitedCVE-2022-26925 CVE-2022-29972 CVE-2022-22713+23

Microsoft Patch Tuesday for May 2022 — Snort rules and prominent vulnerabilities

Cisco TalosMay 10, 19:31 UTC · May 10, 2022VulnerabilityCVE-2022-21972 CVE-2022-23270 CVE-2022-26931+94 · 1 read

Microsoft fixed RCE in driver used by Azure Synapse and Data Factory

Security AffairsMay 10, 14:29 UTC · May 10, 2022VulnerabilityCVE-2022-299723 · 1 read

Microsoft Mitigates RCE Vulnerability Affecting Azure Synapse and Data Factory

The Hacker NewsMay 10, 09:48 UTC · May 10, 2022VulnerabilityCVE-2022-299722 · 1 read