CVE-2023-23408

CVE-2023-23408 corresponds to a spoofing vulnerability in Microsoft Azure HDInsight/Ambari components (Azure Apache Ambari). Public records describe exploitation via the Ambari web interface, enabling an attacker to impersonate a user and potentially perform unauthorized actions. The issue is tra...

CVE-2023-36877

Technical details about CVE-2023-36877 (Azure Apache Oozie Spoofing Vulnerability) are not available in the provided documents. No affected versions, root cause, or mitigation are specified here. Monitor for updates from official advisories.

CVE-2023-35393

CVE-2023-35393 corresponds to a spoofing vulnerability in Azure Apache Hive affecting Azure HDInsight/Hive components. The NCSC advisory summarizes the impact as "Pretend to be another user" and recommends installing the updates from Microsoft MSRC/MS-Update guidance. The available sources label ...

CVE-2023-36881

CVE-2023-36881 corresponds to a spoofing vulnerability in Azure Apache Ambari. Public sources in the connected data identify Azure HDInsights/Azure Arc context and map the impact to spoofing, with an ability to impersonate or pre-emptively act as another user. The MSRC advisory indicates updates ...

CVE-2023-35394

CVE-2023-35394 affects Azure HDInsight Jupyter Notebook. The connected sources describe a spoofing vulnerability in Azure HDInsight Jupyter Notebook that could allow an attacker to pretend to be another user and potentially access or impersonate UI/session elements. The exact technical details (a...

CVE-2023-38188

CVE-2023-38188 is a spoofing vulnerability affecting Azure Apache Hadoop components in Azure HDInsight. Public sources (NCSC) indicate pre-authentication access to impersonate another user, enabling user-interface spoofing and potential privilege-lifting within affected Azure HDInsight/Azure Hado...

CVE-2023-36419

Technical details about CVE-2023-36419 are not publicly provided in the connected documents. The initial description notes an XXE-based elevation of privilege in Azure HDInsight Oozie, but no further specifics (version, root cause, fix) are available here. Monitor for updates.

CVE-2023-38156

CVE-2023-38156 concerns Azure HDInsight Ambari. Connected sources describe a privilege-escalation via insufficient access controls in Azure HDInsight Ambari/JDBC pathways, enabling a remote attacker to gain elevated privileges. The issue is reported for Azure HDInsight and Ambari components, with...

CVE-2026-21529

CVE-2026-21529 involves an improper neutralization of input during web page generation (cross-site scripting) in Azure HDInsight. The issue allows an authorized attacker to perform network-based spoofing by exploiting insufficient input handling during page creation. The vulnerability affects the...