Cross-site Scripting (XSS)

Overview org.apache.oozie:oozie-core is a system to define, manage, schedule, and execute complex Hadoop workloads via web services. Affected versions of this package are vulnerable to Cross-site Scripting XSS in an unspecified component. Note: This project is no longer actively maintained so no...

com.github.sakserv:hadoop-mini-clusters (0.0.14), org.apache.oozie:oozie-sharelib-distcp (4.1.0) +6 more potentially affected by CVE-2025-26796 via org.apache.oozie:oozie-core (4.1.0)

org.apache.oozie:oozie-core MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.oozie:oozie-core and may be impacted: - com.github.sakserv:hadoop-mini-clusters 0.0.14 - org.apache.oozie:oozie-sharelib-distcp 4.1.0 -...

com.github.sakserv:hadoop-mini-clusters (0.0.15), com.github.sakserv:hadoop-mini-clusters-oozie (>=0.1.1, <=0.1.16) +9 more potentially affected by CVE-2025-26796 via org.apache.oozie:oozie-core (>=5.2.0, <=5.2.1)

org.apache.oozie:oozie-core MAVEN version =5.2.0, =0.1.1, =1.2, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.1 Source cves: CVE-2025-26796 Source advisory: OSV:GHSA-FMXW-76XQ-CMQQ...

com.github.sakserv:hadoop-mini-clusters (0.0.15), com.github.sakserv:hadoop-mini-clusters-oozie (>=0.1.1, <=0.1.16) +9 more potentially affected by CVE-2025-26796 via org.apache.oozie:oozie-core (>=5.2.0, <=5.2.1)

org.apache.oozie:oozie-core MAVEN version =5.2.0, =0.1.1, =1.2, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.1 Source cves: CVE-2025-26796 Source advisory: GHSA-FMXW-76XQ-CMQQ...

com.github.sakserv:hadoop-mini-clusters (>=0.0.14, <=0.0.15), com.github.sakserv:hadoop-mini-clusters-oozie (>=0.1.1, <=0.1.16) +13 more potentially affected by CVE-2025-26796 via org.apache.oozie:oozie-core (>=4.1.0, <=5.2.1)

org.apache.oozie:oozie-core MAVEN version =4.1.0, =0.0.14, =0.1.1, =1.0, =1.2, =4.2.0, =5.2.0, =4.1.0, =4.2.0, =4.1.0, =4.1.0, =4.1.0, =4.1.0, =5.2.1 - org.kitesdk:kite-data-oozie 1.1.0 Source cves: CVE-2025-26796 Source advisory: SNYK:JAVA-ORGAPACHEOOZIE-9512888...

de.m3y.oozie.prometheus:oozie-prometheus-job-event-listener (>=1.0, <=1.2), org.apache.oozie:oozie-examples (4.2.0) +7 more potentially affected by CVE-2025-26796 via org.apache.oozie:oozie-core (4.2.0)

org.apache.oozie:oozie-core MAVEN version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.oozie:oozie-core and may be impacted: - de.m3y.oozie.prometheus:oozie-prometheus-job-event-listener =1.0, =1.2 - org.apache.oozie:oozie-examples...

com.github.sakserv:hadoop-mini-clusters (0.0.14), de.m3y.oozie.prometheus:oozie-prometheus-job-event-listener (>=1.0, <=1.2) +10 more potentially affected by CVE-2017-15712 via org.apache.oozie:oozie-core (>=4.1.0, <=4.2.0)

org.apache.oozie:oozie-core MAVEN version =4.1.0, =1.0, =4.1.0, =4.1.0, =4.1.0, =4.1.0, =4.1.0, =4.2.0 - org.kitesdk:kite-data-oozie 1.1.0 Source cves: CVE-2017-15712 Source advisory: OSV:GHSA-2FX6-R6QX-3C7H...

com.github.sakserv:hadoop-mini-clusters (0.0.14), de.m3y.oozie.prometheus:oozie-prometheus-job-event-listener (>=1.0, <=1.2) +10 more potentially affected by CVE-2017-15712 via org.apache.oozie:oozie-core (>=4.1.0, <=4.2.0)

org.apache.oozie:oozie-core MAVEN version =4.1.0, =1.0, =4.1.0, =4.1.0, =4.1.0, =4.1.0, =4.1.0, =4.2.0 - org.kitesdk:kite-data-oozie 1.1.0 Source cves: CVE-2017-15712 Source advisory: GHSA-2FX6-R6QX-3C7H...

com.esri.hadoop:spatial-sdk-hive (>=1.0.1, <=1.1), com.esri.hadoop:spatial-sdk-json (>=1.0.1, <=1.1) +11 more potentially affected by CVE-2017-3161 via org.apache.hadoop:hadoop-client (1.1.1)

org.apache.hadoop:hadoop-client MAVEN version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hadoop:hadoop-client and may be impacted: - com.esri.hadoop:spatial-sdk-hive =1.0.1, =1.0.1, =1.1 - org.apache.oozie:oozie-core 4.1.0 -...

com.github.sakserv:hadoop-mini-clusters (0.0.14), org.apache.oozie:oozie-sharelib-distcp (4.1.0) +6 more potentially affected by CVE-2018-11799 via org.apache.oozie:oozie-core (4.1.0)

org.apache.oozie:oozie-core MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.oozie:oozie-core and may be impacted: - com.github.sakserv:hadoop-mini-clusters 0.0.14 - org.apache.oozie:oozie-sharelib-distcp 4.1.0 -...

de.m3y.oozie.prometheus:oozie-prometheus-job-event-listener (>=1.0, <=1.2), org.apache.oozie:oozie-examples (4.2.0) +7 more potentially affected by CVE-2018-11799 via org.apache.oozie:oozie-core (4.2.0)

org.apache.oozie:oozie-core MAVEN version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.oozie:oozie-core and may be impacted: - de.m3y.oozie.prometheus:oozie-prometheus-job-event-listener =1.0, =1.2 - org.apache.oozie:oozie-examples...

Unauthorized Access

oozie-core is vulnerable to unauthorized access. The vulnerability exists as an attacker could cause workflows that runs as other users simply by constructing an XML...

com.github.sakserv:hadoop-mini-clusters (0.0.14), de.m3y.oozie.prometheus:oozie-prometheus-job-event-listener (>=1.0, <=1.2) +10 more potentially affected by CVE-2018-11799 via org.apache.oozie:oozie-core (>=4.1.0, <=4.2.0)

org.apache.oozie:oozie-core MAVEN version =4.1.0, =1.0, =4.1.0, =4.1.0, =4.1.0, =4.1.0, =4.1.0, =4.2.0 - org.kitesdk:kite-data-oozie 1.1.0 Source cves: CVE-2018-11799 Source advisory: MEND:CVE-2018-11799...

com.github.sakserv:hadoop-mini-clusters (0.0.14), de.m3y.oozie.prometheus:oozie-prometheus-job-event-listener (>=1.0, <=1.2) +10 more potentially affected by CVE-2017-15712 via org.apache.oozie:oozie-core (>=4.1.0, <=4.2.0)

org.apache.oozie:oozie-core MAVEN version =4.1.0, =1.0, =4.1.0, =4.1.0, =4.1.0, =4.1.0, =4.1.0, =4.2.0 - org.kitesdk:kite-data-oozie 1.1.0 Source cves: CVE-2017-15712 Source advisory: MEND:CVE-2017-15712...