CVE-2023-23408— Azure Apache Ambari Spoofing Vulnerability
Quick assessment
Affected
Microsoft Azure HDInsight
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Microsoft Azure是美国微软（Microsoft）公司的一套开放的企业级云计算平台。 Microsoft Azure存在安全漏洞。目前尚无此漏洞的相关信息，请随时关注CNNVD或厂商公告。
Public Exploits 1
ExploitDB · 1
EDB-51546 [remote]
Possible ATT&CK Techniques 1 AI
T1656
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-23408
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Azure Apache Ambari Spoofing Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Azure Apache Ambari Spoofing Vulnerability
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: CVE Program / CVE List V5
Vulnerability Title
Microsoft Azure Apache Ambari 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Azure是美国微软（Microsoft）公司的一套开放的企业级云计算平台。 Microsoft Azure存在安全漏洞。目前尚无此漏洞的相关信息，请随时关注CNNVD或厂商公告。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Microsoft | Azure HDInsight | 1.0 ~ 2302250400 | - |
|
II. Public POCs for CVE-2023-23408
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-23408
请登录查看更多情报信息。
Vendor Advisories for CVE-2023-23408 (1)
Same Patch Batch · Microsoft · 2023-03-14 · 74 CVEs total
| CVE-2023-23415 | 9.8 CRITICAL | Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability |
| CVE-2023-23392 | 9.8 CRITICAL | HTTP Protocol Stack Remote Code Execution Vulnerability |
| CVE-2023-23397 | 9.8 CRITICAL | Microsoft Outlook Elevation of Privilege Vulnerability |
| CVE-2023-21708 | 9.8 CRITICAL | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2023-23403 | 8.8 HIGH | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
| CVE-2023-23413 | 8.8 HIGH | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
| CVE-2023-24907 | 8.8 HIGH | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
| CVE-2023-24867 | 8.8 HIGH | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
| CVE-2023-23406 | 8.8 HIGH | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
| CVE-2023-24868 | 8.8 HIGH | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
| CVE-2023-24909 | 8.8 HIGH | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
| CVE-2023-24871 | 8.8 HIGH | Windows Bluetooth Service Remote Code Execution Vulnerability |
| CVE-2023-24913 | 8.8 HIGH | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
| CVE-2023-24872 | 8.8 HIGH | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
| CVE-2023-23388 | 8.8 HIGH | Windows Bluetooth Driver Elevation of Privilege Vulnerability |
| CVE-2023-24876 | 8.8 HIGH | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
| CVE-2023-24864 | 8.8 HIGH | Microsoft PostScript and PCL6 Class Printer Driver Elevation of Privilege Vulnerability |
| CVE-2023-23383 | 8.2 HIGH | Service Fabric Explorer Spoofing Vulnerability |
| CVE-2023-24892 | 8.2 HIGH | Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability |
| CVE-2023-24869 | 8.1 HIGH | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
Showing top 20 of 74 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Azure HDInsight
-
CVE-2026-85891
Azure HDInsight Information Disclosure Vulnerability -
CVE-2026-81349
Azure HDInsight Ambari Elevation of Privilege Vulnerability -
CVE-2026-21529
Azure HDInsight Spoofing Vulnerability -
CVE-2023-36419
Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevatio -
CVE-2023-38156
Azure HDInsight Apache Ambari JDBC Injection Elevation of Pr
Same vendor: Microsoft
-
CVE-2026-94512
SQL Server Remote Code Execution Vulnerability -
CVE-2026-94520
Microsoft SQL Server Denial of Service Vulnerability -
CVE-2026-85919
Microsoft SQL Server Elevation of Privilege Vulnerability -
CVE-2026-88084
Microsoft SQL Server Denial of Service Vulnerability -
CVE-2026-88086
Microsoft SQL Server Information Disclosure Vulnerability
Same weakness: CWE-79
-
CVE-2026-107428
WordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Cro -
CVE-2026-107757
Gallery Custom Links <= 2.3.3 - Authenticated (Subscriber+) -
CVE-2026-107631
Record of Consent Extension for Complianz <= 2.5 - Unauthent -
CVE-2026-107650
GeoDirectory <= 2.8.190 - Authenticated (Subscriber+) Stored -
CVE-2026-104761
Mang Board <= 2.4.3 - Authenticated (Custom+) Stored Cross-S
V. Comments for CVE-2023-23408
No comments yet