CVE-2015-1775
apache ambari: no CVSS score yet. EPSS 3.0% chance of exploitation in the next 30 days. Fixed in org.apache.ambari:ambari 2.1.0.
Server-side request forgery (SSRF) vulnerability in the proxy endpoint (api/v1/proxy) in Apache Ambari before 2.1.0 allows remote authenticated users to conduct port scans and access unsecured services via a crafted REST call.
- EPSS
- 3.0% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apache:ambari
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-9g2j-5685-h44h | Maven | org.apache.ambari:ambari | >=1.5.0 <2.1.0 | 2.1.0 |