PUBLISHED
2026-08-10 11:17
MODIFIED
2026-08-10 11:17
EPSS (Prob. Exploit)
0.69%
Top 47.3%
> DESCRIPTION
SQL Injection vulnerability vulnerability in Apache Ranger.
This issue affects .
Users are recommended to upgrade to version 2.9.0, which fixes the issue.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-89: Improper Neutralization of Special Elements used in an SQL Command - The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)
Apache Ranger: SQL Injection vulnerability in lookup functionality
AFFECTED PACKAGES:
Unknown / Unknown
34 versions affected
> HISTORIQUE DES MODIFICATIONS
Première apparition
10/08/2026 11:17
Source: NVD
📊
ENRICHISSEMENT
01/11/2026 06:59
CWE
Champ modifié: Description CWE
Ancienne valeur:
CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') - The product constructs all or part of an SQL command using externally-influenced input from an upstream c...
Nouvelle valeur:
CWE-89: Improper Neutralization of Special Elements used in an SQL Command - The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it d...
📊
ENRICHISSEMENT
01/09/2026 06:02
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') - The product constructs all or part of an SQL command using externally-influenced input from an upstream c...
Total des modifications: 2
Dernière mise à jour: 2 days ago