Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Oozie

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-119641

    Apache Oozie: workflow rerun bypasses the per-job ACL and reassigns ownership

    ** UNSUPPORTED WHEN ASSIGNED ** Improper input validation vulnerability in Apache Oozie. An authenticated Oozie user can reconfigure another tenant's workflow job and change its ownership. This issue affects Apache Oozie: all versions. As this project is reti…

    Apache Software Foundation Apache Oozie
  • Medium 5.4
    CVE-2025-26796

    Apache Oozie: XSS in Oozie Web Console

    ** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Oozie. This issue affects Apache Oozie: all versions. As this project is retired, we do not plan to release a version …

    Apache Software Foundation Apache Oozie org.apache.oozie:oozie-core Maven
  • Medium 6.5
    CVE-2018-11799

    Moderate severity vulnerability that affects org.apache.oozie:oozie-core

    Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 5.0.0 to impersonate other users. The malicious user can construct an XML that results workflows running in other user's name.

    Apache Software Foundation Apache Oozie org.apache.oozie:oozie-core Maven
  • Medium 6.5
    CVE-2017-15712

    Path Traversal in Apache Oozie

    Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 4.3.0 and 5.0.0-beta1 to expose private files on the Oozie server process. The malicious user can construct a workflow XML file containing XML directives and configuration that reference sensitiv…

    Apache Software Foundation Apache Oozie org.apache.oozie:oozie-core Maven