Azure Hdinsight
Vendor:
First CVE: Mar 14, 2023 · Active for 3 years
9
Total CVEs
More Total CVEs than 88% of tracked products
4.5
Avg CVEs / Year
Higher CVE frequency than 88% of tracked products
5.5
Avg CVSS
Higher Avg CVSS than 17% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Azure Hdinsight over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 14, 2023
3 years ago
Most Recent CVE
Feb 10, 2026
168 days ago
CVE Severity & Scoring
Azure Hdinsight9 CVEs
78%
11%
11%
All CVEs352,785 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network9 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low9 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None2 (22.2%)
Unknown0 (0.0%)
Required7 (77.8%)
Privileges Required
Low2 (22.2%)
High6 (66.7%)
None1 (11.1%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (9 CVEs).
9 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-36419CRITICAL Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability | Oct 10, 2023 | 9.8 | 27 | NO | NO |
CVE-2023-23408MEDIUM Azure Apache Ambari Spoofing Vulnerability | Mar 14, 2023 | 4.5 | 26 | NO | YES |
CVE-2023-38156HIGH Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability | Sep 12, 2023 | 7.2 | 21 | NO | NO |
CVE-2026-21529MEDIUM Improper neutralization of input during web page generation ('cross-site scripting') in Azure HDInsights allows an authorized attacker to perform spoofing over a network. | Feb 10, 2026 | 5.4 | 20 | NO | NO |
CVE-2023-35394MEDIUM Azure HDInsight Jupyter Notebook Spoofing Vulnerability | Aug 8, 2023 | 4.6 | 19 | NO | NO |
CVE-2023-38188MEDIUM Azure Apache Hadoop Spoofing Vulnerability | Aug 8, 2023 | 4.5 | 18 | NO | NO |
CVE-2023-36877MEDIUM Azure Apache Oozie Spoofing Vulnerability | Aug 8, 2023 | 4.5 | 17 | NO | NO |
CVE-2023-36881MEDIUM Azure Apache Ambari Spoofing Vulnerability | Aug 8, 2023 | 4.5 | 16 | NO | NO |
CVE-2023-35393MEDIUM Azure Apache Hive Spoofing Vulnerability | Aug 8, 2023 | 4.5 | 16 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (9 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
11.1% of CVEs· 86th percentile
Social Chatter
Signals from CVEs in this product scope (9 CVEs).
Media Mentions
Signals from CVEs in this product scope (9 CVEs).
Top CNAs Publishing CVEs For Azure Hdinsight
Top CWEs
Versions
No cataloged versions.