Vulnerabilities

TI-2026-56164 CVE-2026-81349 · GHSA-3mwh-c6rp-4w29

Azure HDInsight Ambari Elevation of Privilege Vulnerability

LOW 36

Improper neutralization of special elements used in an os command ('os command injection') in Azure HDInsights allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01008 Published 2026-09-08 Fixed in 2606012120 CWE-78

TI-2026-17382 CVE-2026-21529 · GHSA-8754-7pfj-x7mr

Azure HDInsight Spoofing Vulnerability

LOW 27

Improper neutralization of input during web page generation ('cross-site scripting') in Azure HDInsights allows an authorized attacker to perform spoofing over a network.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00654 Published 2026-02-10 Fixed in 5.1 CWE-79

TI-2023-18280 CVE-2023-36419 · GHSA-pvvf-569h-5779

Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability

MEDIUM 46

Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0182 Published 2023-10-10 Fixed in 2308221128 CWE-611

TI-2023-19575 CVE-2023-38156 · GHSA-8jf3-q63c-77rv

Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability

LOW 36

Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01987 Published 2023-09-12 Fixed in 2308221128 CWE-20

TI-2023-18667 CVE-2023-36881 · GHSA-95h7-qcfp-8mx9

Azure Apache Ambari Spoofing Vulnerability

LOW 23

Azure Apache Ambari Spoofing Vulnerability

CVSS 3.1MEDIUM 4.5 Network High privileges User interaction EPSS 0.01033 Published 2023-08-08 Fixed in 2307201242 CWE-79

TI-2023-18664 CVE-2023-36877 · GHSA-8c62-6wcm-89qf

Azure Apache Oozie Spoofing Vulnerability

LOW 23

Azure Apache Oozie Spoofing Vulnerability

CVSS 3.1MEDIUM 4.5 Network High privileges User interaction EPSS 0.01033 Published 2023-08-08 Fixed in 2307201242 CWE-79

TI-2023-19603 CVE-2023-38188 · GHSA-h4f6-pvrq-rcr4

Azure Apache Hadoop Spoofing Vulnerability

LOW 23

Azure Apache Hadoop Spoofing Vulnerability

CVSS 3.1MEDIUM 4.5 Network High privileges User interaction EPSS 0.01013 Published 2023-08-08 Fixed in 2307201242 CWE-79

TI-2023-17729 CVE-2023-35394 · GHSA-qvhv-4pmm-cc4q

Azure HDInsight Jupyter Notebook Spoofing Vulnerability

LOW 23

Azure HDInsight Jupyter Notebook Spoofing Vulnerability

CVSS 3.1MEDIUM 4.6 Network Low privileges User interaction EPSS 0.00969 Published 2023-08-08 Fixed in 2307201242 CWE-79

TI-2023-17728 CVE-2023-35393 · GHSA-gfcr-pv59-q6p8

Azure Apache Hive Spoofing Vulnerability

LOW 24

Azure Apache Hive Spoofing Vulnerability

CVSS 3.1MEDIUM 4.5 Network High privileges User interaction EPSS 0.01394 Published 2023-08-08 Fixed in 2307201242 CWE-79

TI-2023-09251 CVE-2023-23408 · GHSA-6h37-c8j2-gj5p

Azure Apache Ambari Spoofing Vulnerability

LOW 28

Azure Apache Ambari Spoofing Vulnerability

CVSS 3.1MEDIUM 4.5 Network High privileges User interaction EPSS 0.04047 Published 2023-03-14 Fixed in 2302250400 CWE-79

Vulnerabilities

Filters