Microsoft Azure Hdinsight
12 CVEs affecting Microsoft Azure Hdinsight. Latest disclosed: 2026-10-13. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-36419 | High | 8.8 | 2023-10-10 | Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability |
CVE-2024-21330 | High | 7.8 | 2024-03-12 | Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability |
CVE-2026-85891 | High | 7.5 | 2026-10-13 | Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network. |
CVE-2026-81349 | High | 7.2 | 2026-09-08 | Improper neutralization of special elements used in an os command ('os command injection') in Azure HDInsights allows an authorized attacker to elevate privile… |
CVE-2023-38156 | High | 7.2 | 2023-09-12 | Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability |
CVE-2026-21529 | Medium | 5.7 | 2026-02-10 | Improper neutralization of input during web page generation ('cross-site scripting') in Azure HDInsights allows an authorized attacker to perform spoofing over… |
CVE-2023-35394 | Medium | 4.6 | 2023-08-08 | Azure HDInsight Jupyter Notebook Spoofing Vulnerability |
CVE-2023-38188 | Medium | 4.5 | 2023-08-08 | Azure Apache Hadoop Spoofing Vulnerability |
CVE-2023-36881 | Medium | 4.5 | 2023-08-08 | Azure Apache Ambari Spoofing Vulnerability |
CVE-2023-36877 | Medium | 4.5 | 2023-08-08 | Azure Apache Oozie Spoofing Vulnerability |
CVE-2023-35393 | Medium | 4.5 | 2023-08-08 | Azure Apache Hive Spoofing Vulnerability |
CVE-2023-23408 | Medium | 4.5 | 2023-03-14 | Azure Apache Ambari Spoofing Vulnerability |