Ranger Security Vulnerabilities and Issues — Ranger CVE List

Lucene search

ApacheRanger

4 matches found

CVE•added 2025/03/03 4:15 p.m.•74 views

CVE-2024-55532

Improper Neutralization of Formula Elements in Export CSV feature of Apache Ranger in Apache Ranger Version

9.8CVSS6.5AI score0.00123EPSS

CVE•added 2017/06/14 5:29 p.m.•66 views

CVE-2017-7676

Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '' wildcard character - like my test, test*.txt. This can result in unintended behavior.

9.8CVSS9.3AI score0.0089EPSS

CVE•added 2025/01/21 10:15 p.m.•58 views

CVE-2024-45479

SSRF vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0.Users are recommended to upgrade to version Apache Ranger 2.5.0, which fixes this issue.

9.1CVSS6.5AI score0.00115EPSS

CVE•added 2016/04/12 2:59 p.m.•41 views

CVE-2016-0733

The Admin UI in Apache Ranger before 0.5.1 does not properly handle authentication requests that lack a password, which allows remote attackers to bypass authentication by leveraging knowledge of a valid username.

9.8CVSS9.5AI score0.01652EPSS