What’s Vulnerable › Products
Apache Software Foundation Apache Ranger vulnerabilities
31 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 15 published in the last 12 months.
Check whether your Apache Software Foundation Apache Ranger version is affected
Latest Apache Software Foundation Apache Ranger vulnerabilities
- CVE-2026-65948 — Apache Ranger: UnixAuth lacks brute-force protection (CVSS 7.3)
- CVE-2026-65945 — Apache Ranger: Logs contain replayable JWT bearer tokens (CVSS 6.5)
- CVE-2026-65942 — Apache Ranger: Clients accept TLS certificates issued for other hostnames (CVSS 7.5)
- CVE-2026-55814 — Apache Ranger: Download APIs expose plugin data without authentication (CVSS 7.5)
- CVE-2026-55799 — Apache Ranger: Remote Code Execution Vulnerability in GraalScriptEngineCreator (CVSS 9.8)
- CVE-2026-44416 — Apache Ranger: Remote Code Execution via Arbitrary Class Instantiation (CVSS 9.8)
- CVE-2026-42537 — Apache Ranger: Remote Code Execution via JDBC URL Injection (CVSS 9.8)
- CVE-2026-40920 — Apache Ranger: Privilege Escalation via URL Parameter (CVSS 9.8)
- CVE-2026-32227 — Apache Ranger: SQL Injection vulnerability in lookup functionality (CVSS 9.8)
- CVE-2026-28672 — Apache Ranger: OS Command Injection via Username in UnixUserGroupBuilder (CVSS 9.8)
- CVE-2025-59060 — Apache Ranger: Hostname verification bypass in NiFiRegistryClient (CVSS 5.3)
- CVE-2025-59059 — Apache Ranger: Remote Code Execution Vulnerability in NashornScriptEngineCreator (CVSS 9.8)
- CVE-2024-55532 — Apache Ranger: Improper Neutralization of Formula Elements in a CSV File (CVSS 9.8)
- CVE-2024-45479 — Apache Ranger: SSRF in Edit Service page - Add logic to filter requests to localhost (CVSS 9.1)
- CVE-2024-45478 — Apache Ranger: Stored XSS in Edit Service page - Add logic to validate user input (CVSS 4.8)
- CVE-2022-45048 — Apache Ranger: code execution vulnerability in policy expressions (CVSS 8.8)
- CVE-2021-40331 — Permissions problem in the Apache Ranger Hive Plugin (CVSS 8.1)
- CVE-2019-12397 — (CVSS 6.1)
- CVE-2018-11778 — (CVSS 8.8)
- CVE-2016-6815 — (CVSS 6.5)
- CVE-2017-7677 — (CVSS 5.9)
- CVE-2017-7676 — (CVSS 9.8)
- CVE-2016-8751 — (CVSS 4.8)
- CVE-2016-8746 — (CVSS 5.9)
- CVE-2016-5395 — (CVSS 4.8)