Login Request a demo
AA
Product
Apache Ambari
by Apache Software Foundation · last CVE Jan 21, 2025
6
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 4Medium 2Low 0
Severity
All severities6Critical0High4Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Apache Ambari to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-51941
8.8
1%
Jan 21
Apache Ambari: Remote Code Injection in Ambari Metrics and AMS Alerts
Affected: through 2.7.8
CVE-2025-23196
8.8
1%
Jan 21
Apache Ambari: Code Injection Vulnerability in Ambari Alert Definition
Affected: 8 before 2.7.9
CVE-2023-50379
8.8
1%
Feb 27
Apache Ambari: authenticated users could perform command injection to perform RCE
Affected: 2.7.0 through 2.7.7
CVE-2025-23195
7.5
1%
Jan 21
Apache Ambari: XML External Entity (XXE) Vulnerability in Ambari/Oozie
Affected: before 2.7.9
CVE-2023-50380
6.5
1%
Feb 27
Apache Ambari: authenticated users could perform XXE to read arbitrary files on the server
Affected: 2.7.0 through 2.7.7
CVE-2023-50378
6.1
1%
Mar 1
Apache Ambari: Various XSS problems
Affected: 2.7.0 through 2.7.7
Showing 6