# Apache Software Foundation Apache Ambari.

Every CVE that names Apache Software Foundation Apache Ambari among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Apache Ambari: Remote Code Injection in Ambari Metrics and AMS Alerts](https://agentprime.io/advisories/CVE-2024-51941.md)
  `CVE-2024-51941` · CVE record: Apache Software Foundation Apache Ambari · CVSS 8.8 High · Not analysed yet · Published 21 Jan 2025 · Tags: Code injection
- [Apache Ambari: Code Injection Vulnerability in Ambari Alert Definition](https://agentprime.io/advisories/CVE-2025-23196.md)
  `CVE-2025-23196` · CVE record: Apache Software Foundation Apache Ambari · CVSS 8.8 High · Not analysed yet · Published 21 Jan 2025 · Tags: Command injection
- [Apache Ambari: XML External Entity (XXE) Vulnerability in Ambari/Oozie](https://agentprime.io/advisories/CVE-2025-23195.md)
  `CVE-2025-23195` · CVE record: Apache Software Foundation Apache Ambari · CVSS 7.5 High · Not analysed yet · Published 21 Jan 2025 · Tags: XML external entities (XXE)
- [Apache Software Foundation Apache Ambari: In Apache Ambari versions 2.6.2.2 and earlier…](https://agentprime.io/advisories/CVE-2020-13924.md)
  `CVE-2020-13924` · CVE record: Apache Software Foundation Apache Ambari · No CVSS score · Not analysed yet · Published 17 Mar 2021
- [Apache Software Foundation Apache Ambari: Apache Ambari, version 2.5.0 to 2.6.2…](https://agentprime.io/advisories/CVE-2018-8042.md)
  `CVE-2018-8042` · CVE record: Apache Software Foundation Apache Ambari · No CVSS score · Not analysed yet · Published 18 Jul 2018
- [Apache Software Foundation Apache Ambari: Apache Ambari, versions 1.4.0 to 2.6.1…](https://agentprime.io/advisories/CVE-2018-8003.md)
  `CVE-2018-8003` · CVE record: Apache Software Foundation Apache Ambari · No CVSS score · Not analysed yet · Published 3 May 2018
- [In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari Server host.](https://agentprime.io/advisories/CVE-2017-5655.md)
  `CVE-2017-5655` · CVE record: Apache Software Foundation Apache Ambari · No CVSS score · Not analysed yet · Published 15 May 2017
- [In Ambari 2.4.x (before 2.4.3) and Ambari 2.5.0, an authorized user of the Ambari Hive View may be able to gain unauthorized read access to files on the host where the Ambari server executes.](https://agentprime.io/advisories/CVE-2017-5654.md)
  `CVE-2017-5654` · CVE record: Apache Software Foundation Apache Ambari · No CVSS score · Not analysed yet · Published 12 May 2017
- [During installation of Ambari 2.4.0 through 2.4.2, Ambari Server artifacts are not created with proper ACLs.](https://agentprime.io/advisories/CVE-2017-5642.md)
  `CVE-2017-5642` · CVE record: Apache Software Foundation Apache Ambari · No CVSS score · Not analysed yet · Published 3 Apr 2017

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=apache-software-foundation-apache-ambari>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/apache-software-foundation-apache-ambari/>. Everything for agents: <https://agentprime.io/llms.txt>.