📦 Ambari

An XML External Entity (XXE) vulnerability in Apache Ambari/Oozie allows attackers to inject malicious XML entities due to insecure parsing with DocumentBuilderFactory. This enables reading arbitrary ...

This CVE describes a code injection vulnerability in Apache Ambari's Alert Definition feature where authenticated users can inject arbitrary shell commands through the script filename field. The vulne...

This vulnerability allows a cluster operator with existing access to inject malicious code into Apache Ambari requests, potentially gaining root privileges on the cluster's main host. It affects Apach...

This directory traversal vulnerability in Apache Ambari allows malicious users to construct file names that escape intended directories, enabling unauthorized file downloads. It affects Apache Ambari ...