353 matches found
Azure HDInsight Apache Ambari Privilege Escalation
The vulnerability in the Apache Ambari web interface of the Azure HDInsight data analytics service relates to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
Azure HDInsight Ambari Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an os command 'os command injection' in Azure HDInsights allows an authorized attacker to elevate privileges over a network...
XML External Entity (XXE)
Ambari/Oozie is vulnerable to an XML External Entity XXE. The vulnerability is due to insecure XML parsing using DocumentBuilderFactory without disabling external entity resolution, which allows an attacker to inject malicious XML entities and exploit the application to read arbitrary files from...
Apache Ambari Exposure Admin Login Panel Detection
An Apache Ambari panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """An Apache Ambari panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Ambari Exposure Admin Login Panel...
CVE-2023-50378
Lack of proper input validation and constraint enforcement in Apache Ambari prior to 2.7.8 Impact : As it will be stored XSS, Could be exploited to perform unauthorized actions, varying from data access to session hijacking and delivering malicious payloads. Users are recommended to upgrade to...
CVE-2025-23195
An XML External Entity XXE vulnerability exists in the Ambari/Oozie project, allowing an attacker to inject malicious XML entities. This vulnerability occurs due to insecure parsing of XML input using the DocumentBuilderFactory class without disabling external entity resolution. An attacker can...
CVE-2025-23196
A code injection vulnerability exists in the Ambari Alert Definition feature, allowing authenticated users to inject and execute arbitrary shell commands. The vulnerability arises when defining alert scripts, where the script filename field is executed using sh -c. An attacker with authenticated...
CVE-2022-42009
SpringEL injection in the server agent in Apache Ambari version 2.7.0 to 2.7.6 allows a malicious authenticated user to execute arbitrary code remotely. Users are recommended to upgrade to 2.7.7...
EUVD-2016-0760
Malware in sbrugna...
EUVD-2017-14737
Malware in sbrugna...
EUVD-2018-19715
Malware in sbrugna...
EUVD-2017-14736
Malware in sbrugna...
EUVD-2016-0741
Malware in sbrugna...
EUVD-2018-19725
Malware in sbrugna...
EUVD-2015-4945
Malware in sbrugna...
EUVD-2017-14733
Malware in sbrugna...
EUVD-2015-3322
Malware in sbrugna...
EUVD-2014-3558
Malware in sbrugna...