Microsoft Azure Hdinsight vulnerabilities
11 known vulnerabilities affecting microsoft/azure_hdinsight.
Total CVEs
11
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH3MEDIUM7
Vulnerabilities
Page 1 of 1
CVE-2023-36419P3CRITICALCVSS 9.8≥ 1.0, < 23082211282023-10-10
CVE-2023-36419 [CRITICAL] CWE-611 CVE-2023-36419: Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability
Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability
nvd
CVE-2026-81349P3HIGHCVSS 7.2≥ 1.0, < 26060121202026-09-08
CVE-2026-81349 [HIGH] CWE-78 CVE-2026-81349: Improper neutralization of special elements used in an os command ('os command injection') in Azure
Improper neutralization of special elements used in an os command ('os command injection') in Azure HDInsights allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2023-38156P3HIGHCVSS 7.2≥ 1.0, < 23082211282023-09-12
CVE-2023-38156 [HIGH] CWE-20 CVE-2023-38156: Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability
Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability
nvd
CVE-2024-21330P3HIGHCVSS 7.8≥ 1.0, < omi-1.8.1-02024-03-12
CVE-2024-21330 [HIGH] CWE-122 CVE-2024-21330: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
nvd
CVE-2026-21529P4MEDIUMCVSS 5.4fixed in 5.1≥ 1.0, < 5.12026-02-10
CVE-2026-21529 [MEDIUM] CWE-79 CVE-2026-21529: Improper neutralization of input during web page generation ('cross-site scripting') in Azure HDInsi
Improper neutralization of input during web page generation ('cross-site scripting') in Azure HDInsights allows an authorized attacker to perform spoofing over a network.
nvd
CVE-2023-23408MEDIUMCVSS 4.5PoC≥ 1.0, < 23022504002023-03-14
CVE-2023-23408 [MEDIUM] CWE-79 Azure Apache Ambari Spoofing Vulnerability
Azure Apache Ambari Spoofing Vulnerability
Azure Apache Ambari Spoofing Vulnerability
cvelistv5
CVE-2023-35394P4MEDIUMCVSS 4.6≥ 1.0, < 23072012422023-08-08
CVE-2023-35394 [MEDIUM] CWE-79 CVE-2023-35394: Azure HDInsight Jupyter Notebook Spoofing Vulnerability
Azure HDInsight Jupyter Notebook Spoofing Vulnerability
nvd
CVE-2023-35393MEDIUMCVSS 4.5≥ 1.0, < 23072012422023-08-08
CVE-2023-35393 [MEDIUM] CWE-79 Azure Apache Hive Spoofing Vulnerability
Azure Apache Hive Spoofing Vulnerability
Azure Apache Hive Spoofing Vulnerability
cvelistv5
CVE-2023-36881MEDIUMCVSS 4.5≥ 1.0, < 23072012422023-08-08
CVE-2023-36881 [MEDIUM] CWE-79 Azure Apache Ambari Spoofing Vulnerability
Azure Apache Ambari Spoofing Vulnerability
Azure Apache Ambari Spoofing Vulnerability
cvelistv5
CVE-2023-36877MEDIUMCVSS 4.5≥ 1.0, < 23072012422023-08-08
CVE-2023-36877 [MEDIUM] CWE-79 Azure Apache Oozie Spoofing Vulnerability
Azure Apache Oozie Spoofing Vulnerability
Azure Apache Oozie Spoofing Vulnerability
cvelistv5
CVE-2023-38188MEDIUMCVSS 4.5≥ 1.0, < 23072012422023-08-08
CVE-2023-38188 [MEDIUM] CWE-79 Azure Apache Hadoop Spoofing Vulnerability
Azure Apache Hadoop Spoofing Vulnerability
Azure Apache Hadoop Spoofing Vulnerability
cvelistv5