CVE-2016-0731

概要

参考情報

• cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities · Vendor Advisory
• docs.hortonworks.com/HDPDocuments/Ambari-2.2.1.0/bk_releasenotes_ambari_2.2.1.0/content/ambari_relnotes-2.2.1.0-cves.html
• issues.apache.org/jira/browse/AMBARI-14780 · Vendor Advisory

ambari のその他の脆弱性

• CVE-2025-23196高 8.8A code injection vulnerability exists in the Ambari Alert Definition feature, allowing authenticated users to inject and execute arbitrary …
• CVE-2025-23195高 7.5An XML External Entity (XXE) vulnerability exists in the Ambari/Oozie project, allowing an attacker to inject malicious XML entities. This …
• CVE-2024-51941高 8.8A remote code injection vulnerability exists in the Ambari Metrics and AMS Alerts feature, allowing authenticated users to inject and execu…
• CVE-2023-50378中 6.1Lack of proper input validation and constraint enforcement in Apache Ambari prior to 2.7.8    Impact : As it will be stored XSS, Could be e…
• CVE-2023-50380中 6.5XML External Entity injection in apache ambari versions <= 2.7.7, Users are recommended to upgrade to version 2.7.8, which fixes this issue.…