Ranger@* Security Vulnerabilities and Issues — Ranger@* CVE List

ApacheRanger*

14 matches found

CVE•added 2026/03/03 10:44 a.m.•417 views

CVE-2025-59059

Apache Ranger versions

9.8CVSS6AI score0.01244EPSS

Save

CVE•added 2025/03/03 4:04 p.m.•176 views

CVE-2024-55532

The Apache Ranger security framework is vulnerable to an Improper Neutralization of Formula Elements in its Export CSV feature. This flaw affects versions prior to 2.6.0 and could allow for the execution of malicious formulas within exported files. Users are recommended to upgrade to version 2.6....

6.5AI score0.00814EPSS

Save

CVE•added 2026/08/10 10:24 a.m.•111 views

CVE-2026-42537

Apache Ranger versions prior to 2.9.0 (

9.8CVSS5.4AI score0.01289EPSS

Save

CVE•added 2026/08/10 10:21 a.m.•111 views

CVE-2026-65942

The Apache Ranger Client Code in versions

7.5CVSS5.2AI score0.00589EPSS

Save

CVE•added 2026/08/10 10:21 a.m.•101 views

CVE-2026-55814

Apache Ranger is affected by a flaw in its download APIs on versions

7.5CVSS5.2AI score0.00657EPSS

Save

CVE•added 2026/08/10 10:23 a.m.•91 views

CVE-2026-55799

A Remote Code Execution (RCE) vulnerability exists in the GraalScriptEngineCreator component of Apache Ranger versions

9.8CVSS5.4AI score0.01216EPSS

Save

CVE•added 2017/06/14 5:00 p.m.•89 views

CVE-2016-8751

CVE-2016-8751 affects Apache Ranger prior to 0.6.3. The vulnerability is a Stored Cross-Site Scripting in custom policy conditions, enabling admin users to store JavaScript executed when normal users log in and access policies. Exploitation details, affected versions beyond 0.6.3, and remediation...

4.8CVSS5AI score0.02133EPSS

Save

CVE•added 2026/08/10 10:26 a.m.•86 views

CVE-2026-32227

Apache Ranger versions prior to 2.9.0 are susceptible to an SQL Injection vulnerability in the lookup functionality . This flaw arises from the improper neutralization of special elements used in SQL commands, which could allow an attacker to insert malicious SQL statements into entry fields for ...

9.8CVSS5.7AI score0.00686EPSS

Save

CVE•added 2018/10/05 7:00 p.m.•85 views

CVE-2018-11778

CVE-2018-11778 affects UnixAuthenticationService in Apache Ranger. Multiple connected sources confirm that UnixAuthenticationService handles user input and previously vulnerable versions could be susceptible to a stack-based buffer overflow, potentially allowing crash or arbitrary code execution....

8.8CVSS8.7AI score0.04011EPSS

Save

CVE•added 2026/08/10 10:20 a.m.•75 views

CVE-2026-65945

Apache Ranger versions

6.5CVSS5.1AI score0.00637EPSS

Save

CVE•added 2026/08/10 10:23 a.m.•73 views

CVE-2026-44416

Apache Ranger versions

9.8CVSS5.4AI score0.01242EPSS

Save

CVE•added 2026/08/10 10:25 a.m.•71 views

CVE-2026-40920

Apache Ranger versions

9.8CVSS5.1AI score0.00732EPSS

Save

CVE•added 2026/08/10 10:20 a.m.•53 views

CVE-2026-65948

Apache Ranger versions

7.3CVSS5.2AI score0.00618EPSS

Save

CVE•added 2026/03/03 10:46 a.m.•51 views

CVE-2025-59060

Apache Ranger versions 2.7.0 and earlier are vulnerable to a hostname verification bypass issue within the NiFiRegistryClient and NiFiClient components. This flaw occurs because the software fails to properly validate hostnames during communication, potentially allowing for a bypass of security c...

5.3CVSS5.2AI score0.0033EPSS

Save