GCVE - cpe:2.3:a:apache:ranger:0.5.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:ranger:0.5.1:*:*:*:*:*:*:*

part: a version: 0.5.1 update: *

Vendor	Apache (`b0303047-b7dd-5cf8-abcc-71b7d9d80b95`)
Product	Ranger (`1651d3c2-a472-53a1-8f67-9a1a4a5c64cb`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:apache/ranger`	purl2cpe	2026-06-01 10:14:24.490772
`pkg:github/apache/ranger`	purl2cpe	2026-06-01 10:14:24.490774
`pkg:maven/org.apache.ranger/ranger`	purl2cpe	2026-06-01 10:14:24.490775

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-6815`	vulnerable	2026-06-08 05:08:11.036704	Details available In Apache Ranger before 0.6.2, users with "keyadmin" role should not be allowed to change password for users with "admin" role. Published: 2017-10-13T14:00:00.000Z Updated: 2024-09-17T04:14:03.099Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/94221 https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-5395`	vulnerable	2026-06-08 05:07:56.925146	Details available Cross-site scripting (XSS) vulnerability in the create user functionality in the policy admin tool in Apache Ranger before 0.6.1 allows remote authenticated administrators to inject arbitrary web script or HTML via vectors related to policies. Published: 2016-09-26T14:00:00.000Z Updated: 2024-08-06T01:00:59.855Z Open on db.gcve.eu Reference links https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger http://www.securityfocus.com/bid/92577	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-2174`	vulnerable	2026-06-08 05:07:33.496427	Details available SQL injection vulnerability in the policy admin tool in Apache Ranger before 0.5.3 allows remote authenticated administrators to execute arbitrary SQL commands via the eventTime parameter to service/plugins/policies/eventTime. Published: 2016-06-13T14:00:00.000Z Updated: 2024-08-05T23:17:50.826Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2016/06/01/3 https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-0735`	vulnerable	2026-06-08 05:07:15.987014	Details available Apache Ranger 0.5.x before 0.5.2 allows remote authenticated users to bypass intended parent resource-level access restrictions by leveraging mishandling of a resource-level exclude policy. Published: 2016-04-11T19:00:00.000Z Updated: 2024-08-05T22:30:04.074Z Open on db.gcve.eu Reference links http://mail-archives.apache.org/mod_mbox/ranger-dev/201603.mbox/%3CD31EE434.14B879%25vel%40apache.org%3E	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.