Approved changes feed: RSS · Atom

cpe:2.3:a:apache:oozie:3.1.3:incubating:*:*:*:*:*:*

part: a version: 3.1.3 update: incubating

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductOozie (1a719ba5-686e-5100-bdae-3162d7e7b615)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:apache/oozie purl2cpe 2026-06-01 10:14:30.042916
pkg:github/apache/oozie purl2cpe 2026-06-01 10:14:30.042918
pkg:maven/org.apache.oozie/oozie-core purl2cpe 2026-06-01 10:14:30.042920

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-11799 vulnerable 2026-06-08 05:10:39.053617 Details available
Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 5.0.0 to impersonate other users. The malicious user can construct an XML that results workflows running in other user's name.
Published: 2018-12-19T20:00:00.000Z
Updated: 2024-08-05T08:17:09.230Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.