5.7
Medium
CVE-2026-21529 Improper neutralization of input during web page generation ('cross-site scripting') in Azure HDInsights allows an…
Description
Improper neutralization of input during web page generation ('cross-site scripting') in Azure HDInsights allows an authorized attacker to perform spoofing over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Azure HDInsight 1.0 | 1.0 → < 5.1 | 5.1 |
References
- Azure HDInsight Spoofing Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Azure HDInsight
The 12 CVEs of Azure HDInsight →
CVE-2026-85891
Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to…
7.5
High
CVE-2026-81349
Improper neutralization of special elements used in an os command ('os command injection') in Azure HDInsights allows an…
7.2
High
CVE-2024-21330
Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
7.8
High
CVE-2023-36419
Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability
8.8
High