Azure Hdinsight (Microsoft) - vulnerabilities (CVEs)

10 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2026-09-08. Vendor: Microsoft.

CVEs of Azure Hdinsight

• CVE-2026-81349 - CVSS 7.2 (high), 2026-09-08: Improper neutralization of special elements used in an os command ('os command injection') in Azure HDInsights allows an authorized attacker to elevate…
• CVE-2026-21529 - CVSS 5.7 (medium), 2026-02-10: Improper neutralization of input during web page generation ('cross-site scripting') in Azure HDInsights allows an authorized attacker to perform spoofing…
• CVE-2023-36419 - CVSS 9.8 (critical), 2023-10-10: Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability
• CVE-2023-38156 - CVSS 7.2 (high), 2023-09-12: Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability
• CVE-2023-38188 - CVSS 4.5 (medium), 2023-08-08: Azure Apache Hadoop Spoofing Vulnerability
• CVE-2023-36881 - CVSS 4.5 (medium), 2023-08-08: Azure Apache Ambari Spoofing Vulnerability
• CVE-2023-36877 - CVSS 4.5 (medium), 2023-08-08: Azure Apache Oozie Spoofing Vulnerability
• CVE-2023-35393 - CVSS 4.5 (medium), 2023-08-08: Azure Apache Hive Spoofing Vulnerability
• CVE-2023-35394 - CVSS 4.6 (medium), 2023-08-08: Azure HDInsight Jupyter Notebook Spoofing Vulnerability
• CVE-2023-23408 - CVSS 4.5 (medium), 2023-03-14: Azure Apache Ambari Spoofing Vulnerability