| Package | Affected versions | Patched versions |
|---|---|---|
| ambari | = 1.7.0= 2.0.0= 2.0.1≤ 2.0.2 |
Cross-site scripting (XSS) vulnerability in Apache Ambari before 2.1.0 allows remote authenticated cluster operator users to inject arbitrary web script or HTML via the note field in a configuration change.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free