Apache Software Foundation Apache Ambari vulnerabilities

26 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Latest Apache Software Foundation Apache Ambari vulnerabilities

CVE-2025-23196 — Apache Ambari: Code Injection Vulnerability in Ambari Alert Definition (CVSS 8.8)
CVE-2025-23195 — Apache Ambari: XML External Entity (XXE) Vulnerability in Ambari/Oozie (CVSS 7.5)
CVE-2024-51941 — Apache Ambari: Remote Code Injection in Ambari Metrics and AMS Alerts (CVSS 8.8)
CVE-2023-50378 — Apache Ambari: Various XSS problems (CVSS 6.1)
CVE-2023-50380 — Apache Ambari: authenticated users could perform XXE to read arbitrary files on the server (CVSS 6.5)
CVE-2023-50379 — Apache Ambari: authenticated users could perform command injection to perform RCE (CVSS 8.8)
CVE-2022-45855 — Apache Ambari: Allows authenticated metrics consumers to perform RCE (CVSS 8.8)
CVE-2022-42009 — Apache Ambari: A malicious authenticated user can remotely execute arbitrary code in the context of the application. (CVSS 8.8)
CVE-2020-13924 — (CVSS 7.5)
CVE-2020-1936 — Stored XSS in Apache Ambari (CVSS 6.1)
CVE-2018-8042 — (CVSS 8.1)
CVE-2018-8003 — (CVSS 5.3)
CVE-2017-5655 — (CVSS 6.5)
CVE-2017-5654 — (CVSS 7.5)
CVE-2017-5642 — (CVSS 9.8)
CVE-2016-4976 — (CVSS 5.5)
CVE-2014-3582 — (CVSS 9.8)
CVE-2016-6807 — (CVSS 9.8)
CVE-2016-0731 — (CVSS 4.9)
CVE-2016-0707 — (CVSS 3.3)
CVE-2015-4940 — (CVSS 2.1)
CVE-2015-4928 — (CVSS 4.3)
CVE-2015-5210 — (CVSS 5.8)
CVE-2015-3270 — (CVSS 6.5)
CVE-2015-3186 — (CVSS 3.5)