VendorsApacheoozieany version
Vulnerabilities

Apache Software Foundation Oozie any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2018-11799
Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 5.0.0 to impersonate other users. The malicious user can construct an XML that results workflows running in other user's name.
Published 2018-12-19 · Modified
6.5EPSS 0.015
CVE-2025-26796
Apache Oozie: XSS in Oozie Web Console
Published 2025-03-22 · Analyzed
5.4EPSS 0.005
CVE-2020-35451
Oozie local privilege escalation
Published 2021-03-09 · Modified
4.7EPSS 0.004