VendorsApacheranger0.5.3
Vulnerabilities

Apache Software Foundation Ranger 0.5.3

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2016-6815
In Apache Ranger before 0.6.2, users with "keyadmin" role should not be allowed to change password for users with "admin" role.
Published 2017-10-13 · Modified
6.5EPSS 0.021
CVE-2016-5395
Cross-site scripting (XSS) vulnerability in the create user functionality in the policy admin tool in Apache Ranger before 0.6.1 allows remote authenticated administrators to inject arbitrary web script or HTML via vectors related to policies.
Published 2016-09-26 · Modified
4.8EPSS 0.021