CVE-2017-3162: Apache Hadoop

High severity, CVSS 7.3. EPSS: 6.4% chance of exploitation in the next 30 days.

HDFS clients interact with a servlet on the DataNode to browse the HDFS namespace. The NameNode is provided as a query parameter that is not validated in Apache Hadoop before 2.7.0.

Affected products

• Apache Hadoop: up to and including 2.6.5

Published 2017-04-26. Last modified 2026-06-17.