CVE Program partner

SNOW

Snowflake

API
CVEs, 365 days012 all time, 2 rejected
Quality-median 99%
CVSS by the CNA-share of records
CWE-share of records
Affected versions-not n/a or unspecified
CVSS added by CISA-lower is better
OrganisationSnowflake
RoleCNA
TypeVendor
Reports tomitre
ScopeSnowflake products, including those of its subsidiaries, and vulnerabilities in third-party software that are discovered by, or reported to, Snowflake that are not within another CNA’s scope.
Advisorieshttps://www.snowflake.com/en/why-snowflake/snowflake-security-hub/security-bulletins/

Latest CVEs · RSS

  • CVE-2024-4129 2024-05-10 · CVSS 8.8
    Improper Authentication vulnerability in Snow Software AB Snow License Manager on Windows allows a networked attacker to perform an Authentication Bypass if Act
  • CVE-2024-1150 2024-02-08 · CVSS 7.8
    Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory Agent on Unix allows File Manipulation through Snow Update Packages.Th
  • CVE-2024-1149 2024-02-08 · CVSS 7.8
    Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory Agent on MacOS, Snow Software Inventory Agent on Windows, Snow Softwar
  • CVE-2023-7169 2024-02-08 · CVSS 6.0
    Authentication Bypass by Spoofing vulnerability in Snow Software Snow Inventory Agent on Windows allows Signature Spoof.This issue affects Snow Inventory Agent:
  • CVE-2023-3937 2023-08-11 · CVSS 4.8
    Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an authenticat
  • CVE-2023-3864 2023-08-11 · CVSS 7.2
    Blind SQL injection in a service running in Snow Software license manager from version 8.0.0 up to and including 9.30.1 on Windows allows a logged in user with
  • CVE-2023-2679 2023-05-17 · CVSS 4.1
    Data leakage in Adobe connector in Snow Software SPE 9.27.0 on Windows allows privileged user to observe other users data.
  • CVE-2022-0883 2022-05-18 · CVSS 7.3
    SLM has an issue with Windows Unquoted/Trusted Service Paths Security Issue. All installations version 9.x.x prior to 9.20.1 should be patched.
  • CVE-2021-4106 2022-02-16 · CVSS 7.8
    A vulnerability in Snow Inventory Java Scanner allows an attacker to run malicious code at a higher level of privileges. This issue affects: SNOW Snow Inventory
  • CVE-2021-41562 2021-11-03 · CVSS 6.1
    A vulnerability in Snow Snow Agent for Windows allows a non-admin user to cause arbitrary deletion of files. This issue affects: Snow Snow Agent for Windows ver

All CVE Program partners