Advisories · Technology

Microsoft Azure HDInsight.

Every CVE that names Microsoft Azure HDInsight among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-85891 CVE record

CVSS 7.5 High

Azure HDInsight Information Disclosure Vulnerability
- Microsoft Azure HDInsight
- Information disclosure
Not analysed yet 13 Oct 2026
CVE-2026-81349 CVE record

CVSS 7.2 High

Azure HDInsight Ambari Elevation of Privilege Vulnerability
- Microsoft Azure HDInsight
- Command injection
Not analysed yet 8 Sept 2026
CVE-2026-21529 CVE record

CVSS 5.7 Medium

Azure HDInsight Spoofing Vulnerability
- Microsoft Azure HDInsight
- Cross-site scripting (XSS)
Not analysed yet 10 Feb 2026
CVE-2024-21330 CVE record

CVSS 7.8 High

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
- Microsoft System Center Operations Manager (SCOM) 2019
- Microsoft System Center Operations Manager (SCOM) 2022
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2023-36419 CVE record

CVSS 8.8 High

Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability
- Microsoft Azure HDInsight
- XML external entities (XXE)
Not analysed yet 10 Oct 2023
CVE-2023-38156 CVE record

CVSS 7.2 High

Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability
- Microsoft Azure HDInsight
- CWE-20
Not analysed yet 12 Sept 2023
CVE-2023-36881 CVE record

CVSS 4.5 Medium

Azure Apache Ambari Spoofing Vulnerability
- Microsoft Azure HDInsight
- Cross-site scripting (XSS)
Not analysed yet 8 Aug 2023
CVE-2023-36877 CVE record

CVSS 4.5 Medium

Azure Apache Oozie Spoofing Vulnerability
- Microsoft Azure HDInsight
- Cross-site scripting (XSS)
Not analysed yet 8 Aug 2023
CVE-2023-38188 CVE record

CVSS 4.5 Medium

Azure Apache Hadoop Spoofing Vulnerability
- Microsoft Azure HDInsight
- Cross-site scripting (XSS)
Not analysed yet 8 Aug 2023
CVE-2023-35394 CVE record

CVSS 4.6 Medium

Azure HDInsight Jupyter Notebook Spoofing Vulnerability
- Microsoft Azure HDInsight
- Cross-site scripting (XSS)
Not analysed yet 8 Aug 2023
CVE-2023-35393 CVE record

CVSS 4.5 Medium

Azure Apache Hive Spoofing Vulnerability
- Microsoft Azure HDInsight
- Cross-site scripting (XSS)
Not analysed yet 8 Aug 2023
CVE-2023-23408 CVE record

CVSS 4.5 Medium

Azure Apache Ambari Spoofing Vulnerability
- Microsoft Azure HDInsight
- Cross-site scripting (XSS)
Not analysed yet 14 Mar 2023