AM
Product
Ambari
26
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 9Medium 7Low 1
Watch
Add Ambari to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-50380 | 6.5 | Feb 27 | XML External Entity injection in apache ambari versions <= 2.7.7, Users are recommended to upgrade to version 2.7.8, which fixes this issue Affected: 2.7.0 before 2.7.8 |
| CVE-2017-5655 | 6.5 | May 15 | In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari Server host Affected: 2.2.2; 2.2.2; 2.2.2; 2.4.0; 2.4.0; 2.4.1; +9 more |
| CVE-2023-50378 | 6.1 | Mar 1 | Lack of proper input validation and constraint enforcement in Apache Ambari prior to 2.7.8 Impact : As it will be stored XSS, Could be exploited to perform unauthorized… Affected: 2.7.0 before 2.7.8 |
| CVE-2020-1936 | 6.1 | Mar 2 | A cross-site scripting issue was found in Apache Ambari Views Affected: before 2.7.4 |
| CVE-2016-4976 | 5.5 | Mar 29 | Apache Ambari 2.x before 2.4.0 includes KDC administrator passwords on the kadmin command line, which allows local users to obtain sensitive information via a process listing Affected: 2.0.0; 2.0.1; 2.0.2; 2.1.0; 2.1.1; 2.1.2; +3 more |
| CVE-2018-8003 | 5.3 | May 3 | Apache Ambari, versions 1.4.0 to 2.6.1, is susceptible to a directory traversal attack allowing an unauthenticated user to craft an HTTP request which provides read-only access to… Affected: 1.4.0 through 2.6.1 |
| CVE-2016-0731 | 4.9 | May 18 | The File Browser View in Apache Ambari before 2.2.1 allows remote authenticated administrators to read arbitrary files via a file: URL in the WebHDFS URL configuration Affected: through 2.2.0 |
Showing 7