CVE-2023-36419

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-611

Affected software

VendorProductVersions
MicrosoftAzure HDInsight>= 1.0, < 2308221128

References

Timeline

Published
Oct 10, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-36426.1A vulnerability was found in GZ Scripts Vacation Rental Website 1.8 and classified as problematic. Affected by this issue is some unknown fuCVE-2023-364207.8Microsoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityCVE-2023-364227.8Microsoft Windows Defender Elevation of Privilege VulnerabilityCVE-2023-364238.8Microsoft Remote Registry Service Remote Code Execution VulnerabilityCVE-2023-364247.8Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVE-2023-364258.0Windows Distributed File System (DFS) Remote Code Execution VulnerabilityCVE-2023-364277.0Windows Hyper-V Elevation of Privilege VulnerabilityCVE-2023-364285.5Microsoft Local Security Authority Subsystem Service Information Disclosure VulnerabilityCVE-2023-364296.5Microsoft Dynamics 365 (On-Premises) Information Disclosure VulnerabilityCVE-2023-36439.8A vulnerability was found in Boss Mini 1.4.0 Build 6221. It has been classified as critical. This affects an unknown part of the file boss/sCVE-2023-364317.5Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityCVE-2023-364336.5Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
CVE-2023-36419: Critical severity, CVSS 9.8 | Vulnix