Vulnerabilities of Microsoft Azure HDInsight

Is your version affected?

CVE	Summary	Score	Published
CVE-2026-85891	Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to…	7.5 High	Oct 13, 2026
CVE-2026-81349	Improper neutralization of special elements used in an os command ('os command injection') in Azure HDInsights allows an…	7.2 High	Sep 8, 2026
CVE-2026-21529	Improper neutralization of input during web page generation ('cross-site scripting') in Azure HDInsights allows an…	5.7 Medium	Feb 10, 2026
CVE-2024-21330	Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability	7.8 High	Mar 12, 2024
CVE-2023-36419	Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability	8.8 High	Oct 10, 2023
CVE-2023-38156	Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability	7.2 High	Sep 12, 2023
CVE-2023-36881	Azure Apache Ambari Spoofing Vulnerability	4.5 Medium	Aug 8, 2023
CVE-2023-36877	Azure Apache Oozie Spoofing Vulnerability	4.5 Medium	Aug 8, 2023
CVE-2023-38188	Azure Apache Hadoop Spoofing Vulnerability	4.5 Medium	Aug 8, 2023
CVE-2023-35394	Azure HDInsight Jupyter Notebook Spoofing Vulnerability	4.6 Medium	Aug 8, 2023
CVE-2023-35393	Azure Apache Hive Spoofing Vulnerability	4.5 Medium	Aug 8, 2023
CVE-2023-23408	Azure Apache Ambari Spoofing Vulnerability	4.5 Medium	Mar 14, 2023