Security
فارسی
All products

org.apache.ranger:ranger

Maven · Package
17 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Apache Ranger has a Command Injection vulnerabilityCVE-2026-28672 · GHSA-6QC3-V8FV-FV9J org.apache.ranger:ranger Maven Critical No fix reported
Apache Ranger UI vulnerable to Server Side Request ForgeryCVE-2024-45479 · GHSA-G9GF-G5JQ-9H3V org.apache.ranger:ranger Maven Critical Fix reported
Apache Ranger has Stored Cross-site Scripting vulnerability in Edit Service PageCVE-2024-45478 · GHSA-VRX2-MGR9-V67H org.apache.ranger:ranger Maven Medium Fix reported
Apache Ranger Cross-site Scripting vulnerabilityCVE-2015-0265 · GHSA-83M2-9G78-RRJ4 org.apache.ranger:ranger Maven Medium Fix reported
Apache Ranger allows users to bypass intended access restrictions via the REST APICVE-2015-5167 · GHSA-QQG7-GCXW-GMJ3 org.apache.ranger:ranger Maven Medium Fix reported
Apache Ranger allows users to bypass intended access restrictions via direct access to module URLsCVE-2015-0266 · GHSA-7CCV-HHVC-62HG org.apache.ranger:ranger Maven High Fix reported
Moderate severity vulnerability that affects org.apache.ranger:rangerCVE-2016-6815 · GHSA-VHXC-8JJQ-859J org.apache.ranger:ranger Maven Medium Fix reported
Apache Ranger Access Restriction BypassCVE-2016-0735 · GHSA-22V7-W6C5-V4RR org.apache.ranger:ranger Maven High Fix reported
Apache Ranger code execution vulnerability in policy expressionsCVE-2022-45048 · GHSA-89GW-CFFJ-MQG9 org.apache.ranger:ranger Maven High Fix reported
Cross-site scripting in Apache RangerCVE-2019-12397 · GHSA-FPQP-V323-44XV org.apache.ranger:ranger Maven Medium Fix reported
UnixAuthenticationService in Apache Ranger was updated to correctly handle user input to avoid Stack-based buffer overflowCVE-2018-11778 · GHSA-C99H-FGQM-6679 org.apache.ranger:ranger Maven High Fix reported
Moderate severity vulnerability that affects org.apache.ranger:rangerCVE-2017-7677 · GHSA-FFJH-FJGG-MFPQ org.apache.ranger:ranger Maven Medium Fix reported
Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '' wildcard characterCVE-2017-7676 · GHSA-758M-6G3Q-G3HH org.apache.ranger:ranger Maven Critical Fix reported
Apache Ranger admin users can store some arbitrary javascript code to be executed when normal users login and access policiesCVE-2016-8751 · GHSA-V7MF-QGXF-QMVF org.apache.ranger:ranger Maven Medium Fix reported
Apache Ranger allows remote authenticated administrators to inject arbitrary web script or HTMLCVE-2016-5395 · GHSA-RF7Q-XQM3-6923 org.apache.ranger:ranger Maven Medium Fix reported
SQL injection vulnerability in the policy admin tool in Apache RangerCVE-2016-2174 · GHSA-4RJF-MXFM-98H5 org.apache.ranger:ranger Maven High Fix reported
The Admin UI in Apache Ranger before 0.5.1 does not properly handle authentication requests that lack a passwordCVE-2016-0733 · GHSA-J84C-J8QM-G47R org.apache.ranger:ranger Maven Critical Fix reported