Apache Ambari vulnerabilities

• apache ambari Apache Ambari: Remote Code Injection in Ambari Metrics and AMS Alerts CVE-2024-51941 8.8 HighJanuary 21, 2025
• apache ambari Apache Ambari: Code Injection Vulnerability in Ambari Alert Definition CVE-2025-23196 8.8 HighJanuary 21, 2025
• apache ambari Apache Ambari: XML External Entity (XXE) Vulnerability in Ambari/Oozie CVE-2025-23195 7.5 HighJanuary 21, 2025
• apache ambari Apache Ambari: Various XSS problems CVE-2023-50378 Fix available 6.1 MediumMarch 1, 2024
• apache ambari Apache Ambari: authenticated users could perform XXE to read arbitrary files on the server CVE-2023-50380 Fix available 6.5 MediumFebruary 27, 2024
• apache ambari Apache Ambari: authenticated users could perform command injection to perform RCE CVE-2023-50379 Fix available 8.8 HighFebruary 27, 2024
• apache ambari Apache Ambari: Allows authenticated metrics consumers to perform RCE CVE-2022-45855 Fix available 8.0 HighJuly 12, 2023
• apache ambari Apache Ambari: A malicious authenticated user can remotely execute arbitrary code in the context of the application. CVE-2022-42009 Fix available 8.0 HighJuly 12, 2023
• apache ambari In Apache Ambari versions 2.6.2.2 and earlier, malicious users can construct file names for... CVE-2020-13924 7.5 HighMarch 17, 2021
• apache ambari Stored XSS in Apache Ambari CVE-2020-1936 Fix available 6.1 MediumMarch 2, 2021
• apache ambari Apache Ambari, version 2.5.0 to 2.6.2, passwords for Hadoop credential stores are exposed in... CVE-2018-8042 8.1 HighJuly 18, 2018
• apache ambari Apache Ambari, versions 1.4.0 to 2.6.1, is susceptible to a directory traversal attack allowing... CVE-2018-8003 5.3 MediumMay 3, 2018
• apache ambari In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary... CVE-2017-5655 6.5 MediumMay 15, 2017
• apache ambari In Ambari 2.4.x (before 2.4.3) and Ambari 2.5.0, an authorized user of the Ambari Hive View may... CVE-2017-5654 7.5 HighMay 12, 2017
• apache ambari During installation of Ambari 2.4.0 through 2.4.2, Ambari Server artifacts are not created with... CVE-2017-5642 9.8 CriticalApril 3, 2017
• apache ambari Apache Ambari reveals administrator passwords CVE-2016-4976 Fix available 5.5 MediumMarch 29, 2017
• apache ambari In Ambari 1.2.0 through 2.2.2, it may be possible to execute arbitrary system commands on the... CVE-2014-3582 9.8 CriticalMarch 29, 2017
• apache ambari Apache Ambari Improper Access Control CVE-2016-6807 Fix available 9.8 CriticalMarch 28, 2017
• apache ambari The File Browser View in Apache Ambari before 2.2.1 allows remote authenticated administrators to... CVE-2016-0731 4.9 MediumMay 18, 2016
• apache ambari The agent in Apache Ambari before 2.1.2 uses weak permissions for the (1) /var/lib/ambari-agent... CVE-2016-0707 3.3 LowMay 18, 2016
• apache ambari Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, stores a... CVE-2015-4940 2.1 LowNovember 8, 2015
• apache ambari Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, includes... CVE-2015-4928 4.3 MediumNovember 8, 2015
• apache ambari Apache Ambari Open Redirect CVE-2015-5210 Fix available 5.8 MediumNovember 2, 2015
• apache ambari Apache Ambari before 2.0.2 or 2.1.x before 2.1.1 allows remote authenticated users to gain... CVE-2015-3270 6.5 MediumNovember 2, 2015
• apache ambari Cross-site scripting (XSS) vulnerability in Apache Ambari before 2.1.0 allows remote... CVE-2015-3186 3.5 LowNovember 2, 2015
• apache ambari Apache Ambari SSRF Vulnerability CVE-2015-1775 Fix available 5.5 MediumNovember 2, 2015