Apache Ranger
Approved changes feed: RSS · Atom
cpe:2.3:a:apache_software_foundation:apache_ranger:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache Software Foundation (f563070d-e18f-561b-b86c-987936937e8a) |
|---|---|
| Product | Apache Ranger (7ecbd635-89bc-523d-ab20-f21fad1c09a0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-59060 |
vulnerable | 2026-06-08 07:35:19.976307 |
Apache Ranger: Hostname verification bypass in NiFiRegistryClient and NifiClient
Hostname verification bypass issue in Apache Ranger NiFiRegistryClient/NiFiClient is reported in Apache Ranger versions <= 2.7.0.
Users are recommended to upgrade to version 2.8.0, which fixes this issue.
Published: 2026-03-03T10:46:52.382Z
Updated: 2026-03-03T14:49:34.864Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59059 |
vulnerable | 2026-06-08 07:35:19.975027 |
Apache Ranger: Remote Code Execution Vulnerability in NashornScriptEngineCreator
Remote Code Execution Vulnerability in NashornScriptEngineCreator is reported in Apache Ranger versions <= 2.7.0.
Users are recommended to upgrade to version 2.8.0, which fixes this issue.
Published: 2026-03-03T10:44:47.294Z
Updated: 2026-03-03T14:54:30.232Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-55532 |
vulnerable | 2026-06-08 06:54:17.042182 |
Apache Ranger: Improper Neutralization of Formula Elements in a CSV File
Improper Neutralization of Formula Elements in Export CSV feature of Apache Ranger in Apache Ranger Version < 2.6.0.
Users are recommended to upgrade to version 2.6.0, which fixes this issue.
Published: 2025-03-03T16:04:54.856Z
Updated: 2025-03-04T16:10:02.790Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45479 |
vulnerable | 2026-06-08 06:48:06.350311 |
Apache Ranger: SSRF in Edit Service page - Add logic to filter requests to localhost
SSRF vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0.
Users are recommended to upgrade to version Apache Ranger 2.5.0, which fixes this issue.
Published: 2025-01-21T21:26:16.500Z
Updated: 2025-06-10T09:06:33.435Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45478 |
vulnerable | 2026-06-08 06:48:06.345598 |
Apache Ranger: Stored XSS in Edit Service page - Add logic to validate user input
Stored XSS vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0.
Users are recommended to upgrade to version Apache Ranger 2.5.0, which fixes this issue.
Published: 2025-01-21T21:25:58.276Z
Updated: 2025-06-10T09:05:27.590Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45048 |
vulnerable | 2026-06-08 05:50:35.446579 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12397 |
vulnerable | 2026-06-08 05:12:39.003742 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11778 |
vulnerable | 2026-06-08 05:10:38.979256 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7677 |
vulnerable | 2026-06-08 05:10:05.861455 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7676 |
vulnerable | 2026-06-08 05:10:05.859927 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8751 |
vulnerable | 2026-06-08 05:08:14.814036 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8746 |
vulnerable | 2026-06-08 05:08:14.795463 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-6815 |
vulnerable | 2026-06-08 05:08:11.035122 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.