CVE-2024-51941High 8.8Apache Ambari: Remote Code Injection in Ambari Metrics and AMS Alerts1.5%
CVE-2025-23196High 8.8Apache Ambari: Code Injection Vulnerability in Ambari Alert Definition1.3%
CVE-2025-23195High 7.5Apache Ambari: XML External Entity (XXE) Vulnerability in Ambari/Oozie0.8%
CVE-2023-50378Medium 6.1Apache Ambari: Various XSS problems1.2%
CVE-2023-50380Medium 6.5Apache Ambari: authenticated users could perform XXE to read arbitrary files on the server0.9%
CVE-2023-50379High 8.8Apache Ambari: authenticated users could perform command injection to perform RCE1.1%
CVE-2022-45855High 8.0Apache Ambari: Allows authenticated metrics consumers to perform RCE1.2%
CVE-2022-42009High 8.0Apache Ambari: A malicious authenticated user can remotely execute arbitrary code in the context of the application.1.2%
CVE-2020-13924UnratedIn Apache Ambari versions 2.6.2.2 and earlier, malicious users can construct file names for directory traversal and traverse to other directories to download files.4.0%