| CVE-2024-51941 |
A remote code injection vulnerability exists in the Ambari Metrics and AMS Alerts feature, allowing authenticated users…
|
Non notée
|
21 janv. 2025 |
| CVE-2025-23196 |
A code injection vulnerability exists in the Ambari Alert Definition feature, allowing authenticated users to inject…
|
Non notée
|
21 janv. 2025 |
| CVE-2025-23195 |
An XML External Entity (XXE) vulnerability exists in the Ambari/Oozie project, allowing an attacker to inject malicious…
|
Non notée
|
21 janv. 2025 |
| CVE-2023-50378 |
Lack of proper input validation and constraint enforcement in Apache Ambari prior to 2.7.8 Impact : As it will be…
|
Non notée
|
1 mars 2024 |
| CVE-2023-50380 |
XML External Entity injection in apache ambari…
|
Non notée
|
27 févr. 2024 |
| CVE-2023-50379 |
Malicious code injection in Apache Ambari in prior to 2.7.8. Users are recommended to upgrade to version 2.7.8, which…
|
Non notée
|
27 févr. 2024 |
| CVE-2022-45855 |
SpringEL injection in the metrics source in Apache Ambari version 2.7.0 to 2.7.6 allows a malicious authenticated user…
|
8.0
Élevée
|
12 juil. 2023 |
| CVE-2022-42009 |
SpringEL injection in the server agent in Apache Ambari version 2.7.0 to 2.7.6 allows a malicious authenticated user…
|
8.0
Élevée
|
12 juil. 2023 |
| CVE-2020-13924 |
In Apache Ambari versions 2.6.2.2 and earlier, malicious users can construct file names for directory traversal and…
|
Non notée
|
17 mars 2021 |
| CVE-2020-1936 |
A cross-site scripting issue was found in Apache Ambari Views
|
Non notée
|
2 mars 2021 |
| CVE-2018-8042 |
Apache Ambari, version 2.5.0 to 2.6.2, passwords for Hadoop credential stores are exposed in Ambari Agent…
|
Non notée
|
18 juil. 2018 |
| CVE-2018-8003 |
Apache Ambari, versions 1.4.0 to 2.6.1, is susceptible to a directory traversal attack allowing an unauthenticated…
|
Non notée
|
3 mai 2018 |
| CVE-2017-5655 |
In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari…
|
Non notée
|
15 mai 2017 |
| CVE-2017-5654 |
In Ambari 2.4.x (before 2.4.3) and Ambari 2.5.0, an authorized user of the Ambari Hive View may be able to gain…
|
Non notée
|
12 mai 2017 |
| CVE-2017-5642 |
During installation of Ambari 2.4.0 through 2.4.2, Ambari Server artifacts are not created with proper ACLs
|
Non notée
|
3 avr. 2017 |
| CVE-2016-6807 |
Custom commands may be executed on Ambari Agent (2.4.x, before 2.4.2) hosts without authorization, leading to…
|
Non notée
|
28 mars 2017 |