CVE-2025-46614

3.3 lowEPSS 0.2%

Low (3.3). EPSS 0.2% chance of exploitation in the next 30 days.

In Snowflake ODBC Driver before 3.7.0, in certain code paths, the Driver logged the whole SQL query at the INFO level, aka Insertion of Sensitive Information into a Log File.

Severity

CVSS 3.1

3.3 low

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-10-31)
CWE: CWE-532
Published: 2025-04-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://community.snowflake.com/s/article/Snowflake-Connector-for-ODBC-Security-Advisory-CVE-2025-46614

Check your stack JSON