Login Request a demo
AM
Product
Ambari
by Apache · last CVE Jan 21, 2025
26
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities26In the news0Timeline
Severity mix
Critical 3High 9Medium 7Low 1
Severity
All severities26Critical3High9Medium7Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Ambari to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-5642
9.8
2%
Apr 3
During installation of Ambari 2.4.0 through 2.4.2, Ambari Server artifacts are not created with proper ACLs
Affected: 2.4.0; 2.4.1; 2.4.2
CVE-2014-3582
9.8
2%
Mar 29
In Ambari 1.2.0 through 2.2.2, it may be possible to execute arbitrary system commands on the Ambari Server host while generating SSL certificates for hosts in an Ambari cluster
Affected: through 2.2.2
CVE-2016-6807
9.8
2%
Mar 28
Custom commands may be executed on Ambari Agent (2.4.x, before 2.4.2) hosts without authorization, leading to unauthorized access to operations that may affect the underlying…
Affected: 2.4.0; 2.4.1
Showing 3