Apache Ranger
Approved changes feed: RSS · Atom
cpe:2.3:a:apache_software_foundation:apache_ranger:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache Software Foundation (f563070d-e18f-561b-b86c-987936937e8a) |
|---|---|
| Product | Apache Ranger (7ecbd635-89bc-523d-ab20-f21fad1c09a0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-44416 |
vulnerable | 2026-09-16 04:33:45.369240 |
Apache Ranger: Remote Code Execution via Arbitrary Class Instantiation
Remote Code Execution via Arbitrary Class Instantiation in plugin-schema-registry component in Apache Ranger <= 2.8.0.
Users are recommended to upgrade to version 2.9.0, which fixes this issue.
Published: 2026-08-10T10:23:50.893Z
Updated: 2026-08-12T15:19:33.507Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40920 |
vulnerable | 2026-09-16 04:33:38.923774 |
Apache Ranger: Privilege Escalation via URL Parameter
Privilege Escalation via URL Parameter is reported in Apache Ranger versions <= 2.8.0.
Users are recommended to upgrade to version 2.9.0, which fixes this issue.
Published: 2026-08-10T10:25:49.563Z
Updated: 2026-08-12T15:20:12.224Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-42537 |
vulnerable | 2026-09-16 04:33:19.850606 |
Apache Ranger: Remote Code Execution via JDBC URL Injection
Remote Code Execution via JDBC URL Injection in Apache Ranger <= 2.8.0
Users are recommended to upgrade to version 2.9.0, which fixes this issue.
Published: 2026-08-10T10:24:34.478Z
Updated: 2026-08-12T15:20:52.287Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-32227 |
under_investigation | 2026-09-16 04:33:19.158594 |
Apache Ranger: SQL Injection vulnerability in lookup functionality
SQL Injection vulnerability vulnerability in Apache Ranger.
This issue affects .
Users are recommended to upgrade to version 2.9.0, which fixes the issue.
Published: 2026-08-10T10:26:06.331Z
Updated: 2026-08-12T15:50:08.598Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-55814 |
vulnerable | 2026-09-16 04:33:12.974996 |
Apache Ranger: Download APIs expose plugin data without authentication
Missing Authentication in Apache Ranger Download APIs on versions <= 2.8.0.
Users are recommended to upgrade to version 2.9.0, which fixes this issue.
Published: 2026-08-10T10:21:28.398Z
Updated: 2026-08-10T19:57:30.694Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-55799 |
vulnerable | 2026-09-16 04:33:12.615402 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-65945 |
vulnerable | 2026-09-16 04:33:07.811100 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-65948 |
vulnerable | 2026-09-16 04:33:07.700185 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-65942 |
vulnerable | 2026-09-16 04:33:07.459416 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-28672 |
vulnerable | 2026-09-16 04:32:41.975329 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59060 |
vulnerable | 2026-06-08 07:35:19.976307 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59059 |
vulnerable | 2026-06-08 07:35:19.975027 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-55532 |
vulnerable | 2026-06-08 06:54:17.042182 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45479 |
vulnerable | 2026-06-08 06:48:06.350311 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45478 |
vulnerable | 2026-06-08 06:48:06.345598 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45048 |
vulnerable | 2026-06-08 05:50:35.446579 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12397 |
vulnerable | 2026-06-08 05:12:39.003742 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11778 |
vulnerable | 2026-06-08 05:10:38.979256 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7677 |
vulnerable | 2026-06-08 05:10:05.861455 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7676 |
vulnerable | 2026-06-08 05:10:05.859927 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8751 |
vulnerable | 2026-06-08 05:08:14.814036 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8746 |
vulnerable | 2026-06-08 05:08:14.795463 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-6815 |
vulnerable | 2026-06-08 05:08:11.035122 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.