CVE-2023-23408

CVE-2023-23408 corresponds to a spoofing vulnerability in Microsoft Azure HDInsight/Ambari components (Azure Apache Ambari). Public records describe exploitation via the Ambari web interface, enabling an attacker to impersonate a user and potentially perform unauthorized actions. The issue is tra...

CVE-2023-36877

Technical details about CVE-2023-36877 (Azure Apache Oozie Spoofing Vulnerability) are not available in the provided documents. No affected versions, root cause, or mitigation are specified here. Monitor for updates from official advisories.

CVE-2023-35393

CVE-2023-35393 corresponds to a spoofing vulnerability in Azure Apache Hive affecting Azure HDInsight/Hive components. The NCSC advisory summarizes the impact as "Pretend to be another user" and recommends installing the updates from Microsoft MSRC/MS-Update guidance. The available sources label ...

CVE-2023-36881

CVE-2023-36881 corresponds to a spoofing vulnerability in Azure Apache Ambari. Public sources in the connected data identify Azure HDInsights/Azure Arc context and map the impact to spoofing, with an ability to impersonate or pre-emptively act as another user. The MSRC advisory indicates updates ...

CVE-2023-36419

Technical details about CVE-2023-36419 are not publicly provided in the connected documents. The initial description notes an XXE-based elevation of privilege in Azure HDInsight Oozie, but no further specifics (version, root cause, fix) are available here. Monitor for updates.

CVE-2023-38188

CVE-2023-38188 is a spoofing vulnerability affecting Azure Apache Hadoop components in Azure HDInsight. Public sources (NCSC) indicate pre-authentication access to impersonate another user, enabling user-interface spoofing and potential privilege-lifting within affected Azure HDInsight/Azure Hado...

CVE-2023-35394

CVE-2023-35394 affects Azure HDInsight Jupyter Notebook. The connected sources describe a spoofing vulnerability in Azure HDInsight Jupyter Notebook that could allow an attacker to pretend to be another user and potentially access or impersonate UI/session elements. The exact technical details (a...

CVE-2023-38156

CVE-2023-38156 concerns Azure HDInsight Ambari. Connected sources describe a privilege-escalation via insufficient access controls in Azure HDInsight Ambari/JDBC pathways, enabling a remote attacker to gain elevated privileges. The issue is reported for Azure HDInsight and Ambari components, with...

CVE-2026-21529

CVE-2026-21529 involves an improper neutralization of input during web page generation (cross-site scripting) in Azure HDInsight. The issue allows an authorized attacker to perform network-based spoofing by exploiting insufficient input handling during page creation. The vulnerability affects the...

CVE-2026-81349

Azure HDInsight is affected by an OS command injection vulnerability in its Ambari component, resulting from improper neutralization of special elements used in OS commands. An authorized attacker can leverage this flaw over the network to elevate privileges , potentially compromising confidentia...