Microsoft Azure Hdinsight
11 CVEs affecting Microsoft Azure Hdinsight. Latest disclosed: 2026-09-08. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-36419 | High | 8.8 | 2023-10-10 | Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability |
CVE-2024-21330 | High | 7.8 | 2024-03-12 | Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability |
CVE-2026-81349 | High | 7.2 | 2026-09-08 | Improper neutralization of special elements used in an os command ('os command injection') in Azure HDInsights allows an authorized attacker to elevate privile… |
CVE-2023-38156 | High | 7.2 | 2023-09-12 | Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability |
CVE-2026-21529 | Medium | 5.7 | 2026-02-10 | Improper neutralization of input during web page generation ('cross-site scripting') in Azure HDInsights allows an authorized attacker to perform spoofing over… |
CVE-2023-35394 | Medium | 4.6 | 2023-08-08 | Azure HDInsight Jupyter Notebook Spoofing Vulnerability |
CVE-2023-38188 | Medium | 4.5 | 2023-08-08 | Azure Apache Hadoop Spoofing Vulnerability |
CVE-2023-36881 | Medium | 4.5 | 2023-08-08 | Azure Apache Ambari Spoofing Vulnerability |
CVE-2023-36877 | Medium | 4.5 | 2023-08-08 | Azure Apache Oozie Spoofing Vulnerability |
CVE-2023-35393 | Medium | 4.5 | 2023-08-08 | Azure Apache Hive Spoofing Vulnerability |
CVE-2023-23408 | Medium | 4.5 | 2023-03-14 | Azure Apache Ambari Spoofing Vulnerability |