Snowflake
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 57 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 2, 2010 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →SQL Injection via unescaped DataFrame column names in Snowflake Connector for Python and Snowflake Connector for Python (Universal Core)
Buffer overflow in SAML authentication post-back URL handling in libsnowflakeclient and Snowflake PHP PDO Driver
Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers
Improper Input Validation in Snowflake CLI Versions Allow Unsanitized User-Controlled Values to be Interpolated into SQL Strings
Workload identity attestation generated before login host validation in Snowflake drivers
Sensitive information written to logs by Snowflake drivers
Snowflake JDBC Driver auto-configuration account validation permits credential redirection
Improper OCSP response validation in Snowflake drivers
Path Traversal and HTTP Parameter Pollution in Snowflake Python API (snowflake.core) Allow Confused-Deputy Privilege Escalation
Multiple Security Vulnerabilities in Snowflake libsnowflakeclient
Monitor Snowflake in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.