Skip to contentCloudera Manager vulnerabilities
- cloudera managerCloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges to view...CVE-2021-324835.3 Medium
- cloudera managerCloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges.CVE-2021-301329.8 Critical
- cloudera managerCloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS.CVE-2021-292436.1 Medium
- cloudera managerCloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS via the path parameter.CVE-2021-324826.1 Medium
- cloudera managerAn issue was discovered in Cloudera Manager 5.x before 5.16.2, 6.0.x before 6.0.2, and 6.1.x...CVE-2019-144495.4 Medium
- cloudera managerCloudera Manager 5.7.x before 5.7.6, 5.8.x before 5.8.4, and 5.9.x before 5.9.1 allows XSS in the...CVE-2016-92715.4 Medium
- cloudera managerCloudera Manager 5.8.x before 5.8.5, 5.9.x before 5.9.2, and 5.10.x before 5.10.1 allows a read...CVE-2017-73998.8 High
- cloudera managerMultiple cross-site scripting (XSS) vulnerabilities in the Cloudera Manager UI before 5.4.3 allow...CVE-2015-44575.4 Medium
- cloudera managerThere is Sensitive Information in Cloudera Manager before 5.4.6 Diagnostic Support Bundles.CVE-2015-64957.5 High
- cloudera managerCloudera Manager 5.x before 5.7.1 places Sensitive Data in cleartext Readable Files.CVE-2016-31926.5 Medium
- cloudera managerCloudera Manager through 5.15 has Incorrect Access Control.CVE-2018-117448.1 High
- cloudera managerThe keystore password for the Spark History Server may be exposed in unsecured files under the ...CVE-2017-93267.5 High
- cloudera managerSecret data of processes managed by CM is not secured by file permissions.CVE-2017-93276.5 Medium
- cloudera managerAn issue was discovered in Cloudera Manager 5.x through 5.15.0. One type of page in Cloudera...CVE-2018-159136.1 Medium
- cloudera managerThis CVE relates to an unspecified cross site scripting vulnerability in Cloudera Manager.CVE-2018-57986.1 Medium
- cloudera navigator key trustee kms, manager +1 moreIn Cloudera Navigator Key Trustee KMS 5.12 and 5.13, incorrect default ACL values allow remote...CVE-2018-61854.9 Medium
- cloudera managerAn issue was discovered in Cloudera Manager before 5.13.4, 5.14.x before 5.14.4, and 5.15.x...CVE-2018-108156.5 Medium
- cloudera navigator, manager +1 moreCloudera Navigator 2.2.x before 2.2.4 and 2.3.x before 2.3.3 include support for SSLv3 when...CVE-2015-40783.1 Low
- cloudera managerCloudera Manager 4.x, 5.0.x before 5.0.6, 5.1.x before 5.1.5, 5.2.x before 5.2.5, and 5.3.x...CVE-2015-22633.3 Low
- cloudera managerCloudera Manager 5.2.0, 5.2.1, and 5.3.0 stores the LDAP bind password in plaintext in...CVE-2014-87332.1 Low
- cloudera managerCloudera Manager before 4.8.3 and 5.x before 5.0.1 allows remote authenticated users to obtain...CVE-2014-02204.0 Medium
- cloudera manager, service and configuration manager +1 moreCloudera Manager 3.7.x before 3.7.5 and Service and Configuration Manager 3.5, when Kerberos is...CVE-2012-22306.5 Medium