Not rated
CVE-2020-1936 A cross-site scripting issue was found in Apache Ambari Views
Description
A cross-site scripting issue was found in Apache Ambari Views. This was addressed in Apache Ambari 2.7.4.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Ambari 2.7 | earliest → < 2.7.4 | 2.7.4 |
References
- lists.apache.org lists.apache.org
- [oss-security] 20210301 CVE-2020-1936: Stored XSS in Apache Ambari www.openwall.com
Timeline
- Published
- Last modified
Other CVEs of Apache Ambari
The 16 CVEs of Apache Ambari →
CVE-2024-51941
A remote code injection vulnerability exists in the Ambari Metrics and AMS Alerts feature, allowing authenticated users…
Not rated
CVE-2025-23196
A code injection vulnerability exists in the Ambari Alert Definition feature, allowing authenticated users to inject…
Not rated
CVE-2025-23195
An XML External Entity (XXE) vulnerability exists in the Ambari/Oozie project, allowing an attacker to inject malicious…
Not rated
CVE-2023-50378
Lack of proper input validation and constraint enforcement in Apache Ambari prior to 2.7.8 Impact : As it will be…
Not rated