53 matches found
CVE-2026-85891
Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network...
EUVD-2026-99575
Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network...
CVE-2026-85891
A vulnerability in Azure HDInsight allows an unauthorized attacker to disclose sensitive information over a network. The issue is categorized under CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) and has a CVSS 3.1 base score of 7.5 (High) . While the specific root cause or a...
Azure HDInsight Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network...
CVE-2026-85891: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network...
KLA91335 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability i...
PT-2026-112838
Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network...
Azure HDInsight Apache Ambari Privilege Escalation
The vulnerability in the Apache Ambari web interface of the Azure HDInsight data analytics service relates to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
Azure HDInsight Ambari Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an os command 'os command injection' in Azure HDInsights allows an authorized attacker to elevate privileges over a network...
CVE-2026-21529 Azure HDInsight Spoofing Vulnerability
...
CVE-2026-21529 Azure HDInsight Spoofing Vulnerability
...
Azure HDInsight Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Azure HDInsights allows an authorized attacker to perform spoofing over a network...
Microsoft Azure HDInsight Cross-Site Script Vulnerability
Microsoft Azure HDInsight is a hosted cluster platform provided by Microsoft Corporation, offering managed, full-spectrum, open-source cloud analysis services for businesses. Microsoft Azure HDInsight has a cross-site scripting vulnerability. Attackers utilize this vulnerability to carry out...
KLA90871 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, spoof user interface, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of...
EUVD-2023-39395
Malicious code in bioql PyPI...
EUVD-2023-40384
Malicious code in bioql PyPI...
EUVD-2023-41981
Malicious code in bioql PyPI...
Experts Detail New Flaws in Azure HDInsight Spark, Kafka, and Hadoop Services
Three new security vulnerabilities have been discovered in Azure HDInsight's Apache Hadoop, Kafka, and Spark services that could be exploited to achieve privilege escalation and a regular expression denial-of-service ReDoS condition. "The new vulnerabilities affect any authenticated user of Azure...
Microsoft Mitigates Three Vulnerabilities in Azure HDInsight
Summary Summary Microsoft recently remediated one Denial of Service and two Escalation of Privilege vulnerabilities affecting third party components of Azure HDInsight. Access to the target cluster as an authenticated user was a prerequisite for exploitation in all three cases. A successful...
Apache Oozie Azure HDInsight Privilege Escalation
The vulnerability of the Apache Oozie data processing automation system, used in Azure HDInsight analytics services, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...