Microsoft
Microsoft Azure Hdinsight: vulnerabilidades y CVE
Microsoft Azure Hdinsight tiene 10 vulnerabilidades publicadas, 2 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE10
Últimos 12 meses2
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-81349 | Alta (7.2) | 1.0% | — | 8 sept 2026 | Improper neutralization of special elements used in an os command ('os command injection') in Azure HDInsights allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-21529 | Media (5.4) | 0.66% | — | 10 feb 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Azure HDInsights allows an authorized attacker to perform spoofing over a network. |
| CVE-2023-36419 | Crítica (9.8) | 1.7% | — | 10 oct 2023 | Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability |
| CVE-2023-38156 | Alta (7.2) | 2.0% | — | 12 sept 2023 | Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability |
| CVE-2023-38188 | Media (4.5) | 1.0% | — | 8 ago 2023 | Azure Apache Hadoop Spoofing Vulnerability |
| CVE-2023-36881 | Media (4.5) | 1.0% | — | 8 ago 2023 | Azure Apache Ambari Spoofing Vulnerability |
| CVE-2023-36877 | Media (4.5) | 1.0% | — | 8 ago 2023 | Azure Apache Oozie Spoofing Vulnerability |
| CVE-2023-35394 | Media (4.6) | 0.97% | — | 8 ago 2023 | Azure HDInsight Jupyter Notebook Spoofing Vulnerability |
| CVE-2023-35393 | Media (4.5) | 1.4% | — | 8 ago 2023 | Azure Apache Hive Spoofing Vulnerability |
| CVE-2023-23408 | Media (4.5) | 4.0% | — | 14 mar 2023 | Azure Apache Ambari Spoofing Vulnerability |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.