← Back

Oozie

oozie

Vendor: Apache • 4 CVEs

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-26796
1Apache
1Oozie
Jun 17, 2026
Mar 22, 2025
N/A· v4
5.4 MEDIUM· v3
N/A· v2
** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Oozie. This issue affects Apache Oozie: all versions. As this project is reti...Show more
** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Oozie. This issue affects Apache Oozie: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.Show less
CVE-2020-35451
1Apache
1Oozie
Jun 17, 2026
Mar 9, 2021
N/A· v4
4.7 MEDIUM· v3
1.9 LOW· v2
There is a race condition in OozieSharelibCLI in Apache Oozie before version 5.2.1 which allows a malicious attacker to replace the files in Oozie's sharelib during it's creation.
CVE-2018-11799
1Apache
1Oozie
Nov 21, 2024
Dec 19, 2018
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 5.0.0 to impersonate other users. The malicious user can construct an XML that results workflows running in other user's name.
CVE-2017-15712
1Apache
1Oozie
Nov 21, 2024
Feb 19, 2018
N/A· v4
6.5 MEDIUM· v3
6.8 MEDIUM· v2
Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 4.3.0 and 5.0.0-beta1 to expose private files on the Oozie server process. The malicious user can construct a workflow XML file containing XML directives an...Show more
Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 4.3.0 and 5.0.0-beta1 to expose private files on the Oozie server process. The malicious user can construct a workflow XML file containing XML directives and configuration that reference sensitive files on the Oozie server host.Show less