Cloudera vulnerabilities

Products

• Manager 22
• Cdh 11
• Hue 6
• Data Science Workbench 5
• Manager 3
• Data Engineering 2

Newest

• cloudera hue Cloudera Hue Ace Editor Directory Traversal Information Disclosure Vulnerability CVE-2025-3884 7.5 HighMay 22, 2025
• cloudera manager Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges to view... CVE-2021-32483 5.3 MediumNovember 8, 2021
• cloudera manager Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges. CVE-2021-30132 9.8 CriticalNovember 8, 2021
• cloudera manager Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS. CVE-2021-29243 6.1 MediumNovember 8, 2021
• cloudera manager Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS via the path parameter. CVE-2021-32482 6.1 MediumNovember 8, 2021
• cloudera hue Cloudera Hue 4.6.0 allows XSS. CVE-2021-29994 6.1 MediumNovember 8, 2021
• cloudera hue Cloudera Hue 4.6.0 allows XSS via the type parameter. CVE-2021-32481 6.1 MediumNovember 8, 2021
• cloudera data engineering In Cloudera Data Engineering (CDE) 1.3.0, JWT authentication tokens are exposed to administrators... CVE-2021-3167 6.5 MediumMarch 15, 2021
• cloudera data engineering Cloudera Data Engineering (CDE) before 1.1 was vulnerable to a CSRF attack. CVE-2020-26936 8.8 HighNovember 26, 2020
• cloudera manager An issue was discovered in Cloudera Manager 5.x before 5.16.2, 6.0.x before 6.0.2, and 6.1.x... CVE-2019-14449 5.4 MediumNovember 26, 2019
• cloudera manager Cloudera Manager 5.7.x before 5.7.6, 5.8.x before 5.8.4, and 5.9.x before 5.9.1 allows XSS in the... CVE-2016-9271 5.4 MediumNovember 26, 2019
• cloudera manager Cloudera Manager 5.8.x before 5.8.5, 5.9.x before 5.9.2, and 5.10.x before 5.10.1 allows a read... CVE-2017-7399 8.8 HighNovember 26, 2019
• cloudera cdh An issue was discovered in Cloudera Hue 6.0.0 through 6.1.0. When using one of following... CVE-2019-7319 8.3 HighNovember 26, 2019
• cloudera data science workbench An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2.... CVE-2018-20090 8.3 HighNovember 26, 2019
• cloudera cdh Cloudera CDH has Insecure Permissions because ALL cannot be revoked.This affects 5.x through 5.15... CVE-2018-17860 7.2 HighNovember 26, 2019
• cloudera manager Multiple cross-site scripting (XSS) vulnerabilities in the Cloudera Manager UI before 5.4.3 allow... CVE-2015-4457 5.4 MediumNovember 26, 2019
• cloudera manager There is Sensitive Information in Cloudera Manager before 5.4.6 Diagnostic Support Bundles. CVE-2015-6495 7.5 HighNovember 26, 2019
• cloudera cdh In Cloudera Hue, there is privilege escalation by a read-only user when CDH 5.x brefore 5.4.9 is... CVE-2015-7831 8.8 HighNovember 26, 2019
• cloudera cdh Cloudera CDH before 5.6.1 allows authorization bypass via direct internal API calls. CVE-2016-3131 6.5 MediumNovember 26, 2019
• cloudera manager Cloudera Manager 5.x before 5.7.1 places Sensitive Data in cleartext Readable Files. CVE-2016-3192 6.5 MediumNovember 26, 2019
• cloudera cdh In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges. CVE-2016-4572 8.8 HighNovember 26, 2019
• cloudera cdh Cloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles. CVE-2016-5724 7.5 HighNovember 26, 2019
• cloudera cdh Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by... CVE-2016-6353 6.5 MediumNovember 26, 2019
• cloudera manager Cloudera Manager through 5.15 has Incorrect Access Control. CVE-2018-11744 8.1 HighJuly 11, 2019
• cloudera cdh The provided secure solrconfig.xml sample configuration does not enforce Sentry authorization on ... CVE-2017-9325 7.5 HighJuly 3, 2019
• cloudera manager The keystore password for the Spark History Server may be exposed in unsecured files under the ... CVE-2017-9326 7.5 HighJuly 3, 2019
• cloudera manager Secret data of processes managed by CM is not secured by file permissions. CVE-2017-9327 6.5 MediumJuly 3, 2019
• cloudera data science workbench Remote code execution is possible in Cloudera Data Science Workbench version 1.3.0 and prior... CVE-2018-11215 9.8 CriticalJuly 3, 2019
• cloudera data science workbench An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.2.x through 1.4.0.... CVE-2018-15665 5.3 MediumJune 21, 2019
• cloudera manager An issue was discovered in Cloudera Manager 5.x through 5.15.0. One type of page in Cloudera... CVE-2018-15913 6.1 MediumJune 20, 2019
• cloudera data science workbench An SQL injection vulnerability was found in Cloudera Data Science Workbench (CDSW) 1.4.0 through... CVE-2018-20091 9.9 CriticalJune 7, 2019
• cloudera manager This CVE relates to an unspecified cross site scripting vulnerability in Cloudera Manager. CVE-2018-5798 6.1 MediumJune 7, 2019
• cloudera navigator key trustee kms, manager +1 more In Cloudera Navigator Key Trustee KMS 5.12 and 5.13, incorrect default ACL values allow remote... CVE-2018-6185 4.9 MediumJune 7, 2019
• cloudera manager An issue was discovered in Cloudera Manager before 5.13.4, 5.14.x before 5.14.4, and 5.15.x... CVE-2018-10815 6.5 MediumMay 24, 2019
• cloudera hue Open redirect vulnerability in Cloudera HUE before 3.10.0 allows remote attackers to redirect... CVE-2015-8094 6.1 MediumMay 22, 2018
• cloudera data science workbench An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.x before 1.2.0. Several web... CVE-2017-15536 8.8 HighFebruary 5, 2018
• cloudera cdh Impala in CDH 5.2.0 through 5.7.2 and 5.8.0 allows remote attackers to bypass Setry authorization. CVE-2016-6605 7.5 HighApril 10, 2017
• cloudera key trustee server Cloudera Key Trustee Server before 5.4.3 does not store keys synchronously, which might allow... CVE-2015-4166 9.8 CriticalMarch 23, 2017
• cloudera navigator, manager +1 more Cloudera Navigator 2.2.x before 2.2.4 and 2.3.x before 2.3.3 include support for SSLv3 when... CVE-2015-4078 3.1 LowMarch 23, 2017
• cloudera manager Cloudera Manager 4.x, 5.0.x before 5.0.6, 5.1.x before 5.1.5, 5.2.x before 5.2.5, and 5.3.x... CVE-2015-2263 3.3 LowMarch 23, 2017
• apache hadoop, cloudera cdh +1 more Improper Authentication in Apache Hadoop CVE-2014-0229 Fix available 6.5 MediumMarch 23, 2017
• cloudera cdh The JobHistory Server in Cloudera CDH 4.x before 4.6.0 and 5.x before 5.0.0 Beta 2, when using... CVE-2013-6446 3.1 LowMarch 23, 2017
• cloudera manager Cloudera Manager 5.5 and earlier allows remote attackers to enumerate user sessions via a request... CVE-2016-4950 7.5 HighMarch 7, 2017
• cloudera manager Cloudera Manager 5.5 and earlier allows remote attackers to obtain sensitive information via a (1... CVE-2016-4949 7.5 HighMarch 7, 2017
• cloudera manager Multiple cross-site scripting (XSS) vulnerabilities in Cloudera Manager 5.5 and earlier allow... CVE-2016-4948 6.1 MediumMarch 7, 2017
• cloudera hue Cloudera HUE Account Enumeration CVE-2016-4947 5.3 MediumMarch 7, 2017
• cloudera hue Multiple cross-site scripting (XSS) vulnerabilities in Cloudera HUE 3.9.0 and earlier allow... CVE-2016-4946 6.1 MediumMarch 7, 2017
• cloudera manager Cloudera Manager 5.2.0, 5.2.1, and 5.3.0 stores the LDAP bind password in plaintext in... CVE-2014-8733 2.1 LowFebruary 10, 2015
• cloudera manager Cloudera Manager before 4.8.3 and 5.x before 5.0.1 allows remote authenticated users to obtain... CVE-2014-0220 4.0 MediumJune 10, 2014
• cloudera manager, service and configuration manager +1 more Cloudera Manager 3.7.x before 3.7.5 and Service and Configuration Manager 3.5, when Kerberos is... CVE-2012-2230 6.5 MediumApril 12, 2012
• Show olderLoading…