CVE-2015-3186

概要

参考情報

• openwall.com/lists/oss-security/2015/10/13/1
• cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities · Vendor Advisory

ambari のその他の脆弱性

• CVE-2025-23196高 8.8A code injection vulnerability exists in the Ambari Alert Definition feature, allowing authenticated users to inject and execute arbitrary …
• CVE-2025-23195高 7.5An XML External Entity (XXE) vulnerability exists in the Ambari/Oozie project, allowing an attacker to inject malicious XML entities. This …
• CVE-2024-51941高 8.8A remote code injection vulnerability exists in the Ambari Metrics and AMS Alerts feature, allowing authenticated users to inject and execu…
• CVE-2023-50378中 6.1Lack of proper input validation and constraint enforcement in Apache Ambari prior to 2.7.8    Impact : As it will be stored XSS, Could be e…
• CVE-2023-50380中 6.5XML External Entity injection in apache ambari versions <= 2.7.7, Users are recommended to upgrade to version 2.7.8, which fixes this issue.…