CVE-2015-3186: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Apache Ambari before 2.1.0 allows remote authenticated cluster operator users to inject arbitrary web script or HTML via the note field in a configuration change...

PT-2015-6089

Name of the Vulnerable Software and Affected Versions Apache Ambari versions prior to 2.1.0 Description A cross-site scripting XSS issue allows remote authenticated cluster operator users to inject arbitrary web script or HTML via the note field in a configuration change. Recommendations For...