Apache Software Foundation Ambari vulnerabilities

• apache ambari Apache Ambari: Remote Code Injection in Ambari Metrics and AMS Alerts CVE-2024-51941 8.8 HighJanuary 21, 2025
• apache ambari Apache Ambari: Code Injection Vulnerability in Ambari Alert Definition CVE-2025-23196 8.8 HighJanuary 21, 2025
• apache ambari Apache Ambari: XML External Entity (XXE) Vulnerability in Ambari/Oozie CVE-2025-23195 7.5 HighJanuary 21, 2025
• apache ambari Apache Ambari: Various XSS problems CVE-2023-50378 Fix available 6.1 MediumMarch 1, 2024
• apache ambari Apache Ambari: authenticated users could perform XXE to read arbitrary files on the server CVE-2023-50380 Fix available 6.5 MediumFebruary 27, 2024
• apache ambari Apache Ambari: authenticated users could perform command injection to perform RCE CVE-2023-50379 Fix available 8.8 HighFebruary 27, 2024
• apache ambari Apache Ambari: Allows authenticated metrics consumers to perform RCE CVE-2022-45855 Fix available 8.0 HighJuly 12, 2023
• apache ambari Apache Ambari: A malicious authenticated user can remotely execute arbitrary code in the context of the application. CVE-2022-42009 Fix available 8.0 HighJuly 12, 2023
• apache ambari In Apache Ambari versions 2.6.2.2 and earlier, malicious users can construct file names for... CVE-2020-13924 7.5 HighMarch 17, 2021
• apache ambari Stored XSS in Apache Ambari CVE-2020-1936 Fix available 6.1 MediumMarch 2, 2021
• apache ambari Apache Ambari, version 2.5.0 to 2.6.2, passwords for Hadoop credential stores are exposed in... CVE-2018-8042 8.1 HighJuly 18, 2018
• apache ambari Apache Ambari, versions 1.4.0 to 2.6.1, is susceptible to a directory traversal attack allowing... CVE-2018-8003 5.3 MediumMay 3, 2018
• apache ambari In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary... CVE-2017-5655 6.5 MediumMay 15, 2017
• apache ambari In Ambari 2.4.x (before 2.4.3) and Ambari 2.5.0, an authorized user of the Ambari Hive View may... CVE-2017-5654 7.5 HighMay 12, 2017
• apache ambari During installation of Ambari 2.4.0 through 2.4.2, Ambari Server artifacts are not created with... CVE-2017-5642 9.8 CriticalApril 3, 2017
• apache ambari Apache Ambari Improper Access Control CVE-2016-6807 Fix available 9.8 CriticalMarch 28, 2017