CVE-2025-26796

Apache Oozie is vulnerable to Cross-Site Scripting (XSS) due to the improper neutralization of input during web page generation. The root cause is a lack of effective filtering and escaping of user-supplied data, which allows an attacker to inject and execute malicious scripts or HTML. This vulne...

CVE-2020-35451

CVE-2020-35451 affects Apache Oozie (OozieSharelibCLI component). A race condition during the creation of Oozie sharelib in versions prior to 5.2.1 allows a malicious attacker to replace files in Oozie’s sharelib while it is being created. The core issue is concurrent access to shared resources w...