Browse CVEs

HIGH 7.5 CVE-2025-3884 Cloudera Hue Ace Editor Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive in… Hue Mitigation only Fix from $1,9502025-05-22 CRITICAL 9.8 CVE-2021-30132 Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges. Cloudera Manager Mitigation only Fix from $2,3002021-11-08 MEDIUM 5.3 CVE-2021-32483 Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges to view the restricted Dashboard. Cloudera Manager Mitigation only Fix from $1,6002021-11-08 MEDIUM 6.1 CVE-2021-29994 Cloudera Hue 4.6.0 allows XSS. Hue No fix yet Fix from $1,6002021-11-08 MEDIUM 6.1 CVE-2021-32481 Cloudera Hue 4.6.0 allows XSS via the type parameter. Hue Mitigation only Fix from $1,6002021-11-08 MEDIUM 6.5 CVE-2021-3167 In Cloudera Data Engineering (CDE) 1.3.0, JWT authentication tokens are exposed to administrators in virtual cluster server logs. Data Engineering Mitigation only Fix from $1,6002021-03-15 HIGH 8.3 CVE-2019-7319 An issue was discovered in Cloudera Hue 6.0.0 through 6.1.0. When using one of following authentication backends: LdapBackend, PamBackend, SpnegoDjan… Cdh Mitigation only Fix from $1,9502019-11-26 HIGH 8.8 CVE-2016-4572 In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges. Cdh Mitigation only Fix from $1,9502019-11-26 HIGH 7.5 CVE-2017-9326 The keystore password for the Spark History Server may be exposed in unsecured files under the /var/run/cloudera-scm-agent directory managed by Cloud… Cloudera Manager Mitigation only Fix from $1,9502019-07-03 MEDIUM 6.5 CVE-2017-9327 Secret data of processes managed by CM is not secured by file permissions. Cloudera Manager No fix yet Fix from $1,6002019-07-03 HIGH 7.5 CVE-2016-6605 Impala in CDH 5.2.0 through 5.7.2 and 5.8.0 allows remote attackers to bypass Setry authorization. Cdh Mitigation only Fix from $1,9502017-04-10 MEDIUM 6.5 CVE-2012-2230 Cloudera Manager 3.7.x before 3.7.5 and Service and Configuration Manager 3.5, when Kerberos is not enabled, does not properly install taskcontroller… Cloudera Manager Mitigation only Fix from $1,6002012-04-12