Ranger@* Security Vulnerabilities and Issues — Ranger@* CVE List

ApacheRanger*

14 matches found

CVE•added 2026/03/03 10:44 a.m.•423 views

CVE-2025-59059

Apache Ranger versions

9.8CVSS5.8AI score0.01266EPSS

Save

CVE•added 2025/03/03 4:04 p.m.•184 views

CVE-2024-55532

Apache Ranger versions prior to 2.6.0 are vulnerable to CSV Injection (CWE-1236) within the Export CSV feature. The root cause is the insufficient sanitization of exported CSV data, which allows for the improper neutralization of formula elements . Specifically, the org.apache.ranger:security-adm...

9.8CVSS6.5AI score0.00814EPSS

Save

CVE•added 2026/08/10 10:24 a.m.•133 views

CVE-2026-42537

Apache Ranger versions prior to 2.9.0 (

9.8CVSS5.8AI score0.01289EPSS

Save

CVE•added 2026/08/10 10:21 a.m.•128 views

CVE-2026-65942

The Apache Ranger Client Code in versions

7.5CVSS5.7AI score0.00589EPSS

Save

CVE•added 2026/08/10 10:21 a.m.•109 views

CVE-2026-55814

Apache Ranger is affected by a flaw in its download APIs on versions

7.5CVSS5.7AI score0.00657EPSS

Save

CVE•added 2026/08/10 10:23 a.m.•100 views

CVE-2026-55799

A Remote Code Execution (RCE) vulnerability exists in the GraalScriptEngineCreator component of Apache Ranger versions

9.8CVSS5.8AI score0.01216EPSS

Save

CVE•added 2017/06/14 5:00 p.m.•96 views

CVE-2016-8751

CVE-2016-8751 affects Apache Ranger prior to 0.6.3. The vulnerability is a Stored Cross-Site Scripting in custom policy conditions, enabling admin users to store JavaScript executed when normal users log in and access policies. Exploitation details, affected versions beyond 0.6.3, and remediation...

4.8CVSS5AI score0.02133EPSS

Save

CVE•added 2026/08/10 10:23 a.m.•96 views

CVE-2026-44416

Apache Ranger versions

9.8CVSS5.8AI score0.01242EPSS

Save

CVE•added 2026/08/10 10:26 a.m.•93 views

CVE-2026-32227

Apache Ranger versions prior to 2.9.0 are susceptible to an SQL Injection vulnerability in the lookup functionality . This flaw arises from the improper neutralization of special elements used in SQL commands, which could allow an attacker to insert malicious SQL statements into entry fields for ...

9.8CVSS5.8AI score0.00686EPSS

Save

CVE•added 2018/10/05 7:00 p.m.•89 views

CVE-2018-11778

CVE-2018-11778 affects UnixAuthenticationService in Apache Ranger. Multiple connected sources confirm that UnixAuthenticationService handles user input and previously vulnerable versions could be susceptible to a stack-based buffer overflow, potentially allowing crash or arbitrary code execution....

8.8CVSS8.7AI score0.04011EPSS

Save

CVE•added 2026/08/10 10:20 a.m.•89 views

CVE-2026-65945

Apache Ranger versions

6.5CVSS5.6AI score0.00637EPSS

Save

CVE•added 2026/08/10 10:25 a.m.•85 views

CVE-2026-40920

Apache Ranger versions

9.8CVSS5.6AI score0.00732EPSS

Save

CVE•added 2026/08/10 10:20 a.m.•65 views

CVE-2026-65948

Apache Ranger versions

7.3CVSS5.7AI score0.00618EPSS

Save

CVE•added 2026/03/03 10:46 a.m.•59 views

CVE-2025-59060

Apache Ranger versions 2.7.0 and earlier are vulnerable to a hostname verification bypass issue within the NiFiRegistryClient and NiFiClient components. This flaw occurs because the software fails to properly validate hostnames during communication, potentially allowing for a bypass of security c...

5.3CVSS5.7AI score0.00336EPSS

Save