Known vulnerabilities in Apache Oozie
Vendor:
Apache Foundation
Software:
Apache Oozie
Software CPE:
cpe:2.3:a:apache_foundation:apache_oozie:*:*:*:*:*:*:*:*
Website:
https://www.apache.org
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU106095 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-26796 |
CWE-79 | Low | - | 27.03.2025 |
SB2025032719 |
||
| #VU51382 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2020-35451 |
CWE-362 | Low | 5.2.1 | 10.03.2021 |
SB2021031017 |
||
| #VU16643 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2018-11799 |
CWE-611 | Low | 5.0.1 | 19.12.2018 |
SB2018122013 |
||
| #VU10632 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2017-15712 |
CWE-611 | Low | - | 19.02.2018 |
SB2018021519 SB2024050903 |