Microsoft Azure Hdinsight — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Azure Hdinsight, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (10)

• CVE-2023-36419 — CVSS 8.8 (high): Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability
• CVE-2023-38156 — CVSS 7.2 (high): Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability
• CVE-2026-81349 — CVSS 7.2 (high): Improper neutralization of special elements used in an os command ('os command injection') in Azure HDInsights allows an authorized…
• CVE-2026-21529 — CVSS 5.7 (medium): Improper neutralization of input during web page generation ('cross-site scripting') in Azure HDInsights allows an authorized attacker to…
• CVE-2023-35394 — CVSS 4.6 (medium): Azure HDInsight Jupyter Notebook Spoofing Vulnerability
• CVE-2023-36881 — CVSS 4.5 (medium): Azure Apache Ambari Spoofing Vulnerability
• CVE-2023-35393 — CVSS 4.5 (medium): Azure Apache Hive Spoofing Vulnerability
• CVE-2023-36877 — CVSS 4.5 (medium): Azure Apache Oozie Spoofing Vulnerability
• CVE-2023-23408 — CVSS 4.5 (medium): Azure Apache Ambari Spoofing Vulnerability
• CVE-2023-38188 — CVSS 4.5 (medium): Azure Apache Hadoop Spoofing Vulnerability