What’s Vulnerable › Products

Microsoft Azure HDInsight vulnerabilities

12 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Microsoft Azure HDInsight version is affected

Latest Microsoft Azure HDInsight vulnerabilities

• CVE-2026-85891 — Azure HDInsight Information Disclosure Vulnerability (CVSS 7.5)
• CVE-2026-81349 — Azure HDInsight Ambari Elevation of Privilege Vulnerability (CVSS 7.2)
• CVE-2026-21529 — Azure HDInsight Spoofing Vulnerability (CVSS 5.4)
• CVE-2024-21330 — Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2023-36419 — Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability (CVSS 9.8)
• CVE-2023-38156 — Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability (CVSS 7.2)
• CVE-2023-36881 — Azure Apache Ambari Spoofing Vulnerability (CVSS 4.5)
• CVE-2023-36877 — Azure Apache Oozie Spoofing Vulnerability (CVSS 4.5)
• CVE-2023-38188 — Azure Apache Hadoop Spoofing Vulnerability (CVSS 4.5)
• CVE-2023-35394 — Azure HDInsight Jupyter Notebook Spoofing Vulnerability (CVSS 4.6)
• CVE-2023-35393 — Azure Apache Hive Spoofing Vulnerability (CVSS 4.5)
• CVE-2023-23408 — Azure Apache Ambari Spoofing Vulnerability (CVSS 4.5)