Browse CVEs

HIGH 7.5 CVE-2025-3884 Cloudera Hue Ace Editor Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive in… Hue Mitigation only Fix from $1,9502025-05-22 CRITICAL 9.8 CVE-2021-30132 Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges. Cloudera Manager Mitigation only Fix from $2,3002021-11-08 MEDIUM 5.3 CVE-2021-32483 Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges to view the restricted Dashboard. Cloudera Manager Mitigation only Fix from $1,6002021-11-08 MEDIUM 6.1 CVE-2021-29243 Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS. Cloudera Manager after 7.3.4 Fix from $1,6002021-11-08 MEDIUM 6.1 CVE-2021-29994 Cloudera Hue 4.6.0 allows XSS. Hue No fix yet Fix from $1,6002021-11-08 MEDIUM 6.1 CVE-2021-32481 Cloudera Hue 4.6.0 allows XSS via the type parameter. Hue Mitigation only Fix from $1,6002021-11-08 MEDIUM 6.1 CVE-2021-32482 Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS via the path parameter. Cloudera Manager after 7.3.4 Fix from $1,6002021-11-08 MEDIUM 6.5 CVE-2021-3167 In Cloudera Data Engineering (CDE) 1.3.0, JWT authentication tokens are exposed to administrators in virtual cluster server logs. Data Engineering Mitigation only Fix from $1,6002021-03-15 HIGH 8.8 CVE-2020-26936 Cloudera Data Engineering (CDE) before 1.1 was vulnerable to a CSRF attack. Data Engineering 1.1+ Fix from $1,9502020-11-26 MEDIUM 5.4 CVE-2019-14449 An issue was discovered in Cloudera Manager 5.x before 5.16.2, 6.0.x before 6.0.2, and 6.1.x before 6.1.1. Malicious impala queries can result in Cro… Cloudera Manager 5.16.2+ Fix from $1,6002019-11-26 HIGH 8.3 CVE-2019-7319 An issue was discovered in Cloudera Hue 6.0.0 through 6.1.0. When using one of following authentication backends: LdapBackend, PamBackend, SpnegoDjan… Cdh Mitigation only Fix from $1,9502019-11-26 HIGH 8.8 CVE-2017-7399 Cloudera Manager 5.8.x before 5.8.5, 5.9.x before 5.9.2, and 5.10.x before 5.10.1 allows a read-only Cloudera Manager user to discover the usernames … Cloudera Manager after 5.9.1 Fix from $1,9502019-11-26 HIGH 8.3 CVE-2018-20090 An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2. Authenticated users can bypass project permission checks and g… Data Science Workbench after 1.4.2 Fix from $1,9502019-11-26 MEDIUM 5.4 CVE-2016-9271 Cloudera Manager 5.7.x before 5.7.6, 5.8.x before 5.8.4, and 5.9.x before 5.9.1 allows XSS in the help search feature. Cloudera Manager after 5.8.3 Fix from $1,6002019-11-26 HIGH 7.2 CVE-2018-17860 Cloudera CDH has Insecure Permissions because ALL cannot be revoked.This affects 5.x through 5.15.1 and 6.x through 6.0.1. Cdh after 5.14.0 Fix from $1,9502019-11-26 MEDIUM 5.4 CVE-2015-4457 Multiple cross-site scripting (XSS) vulnerabilities in the Cloudera Manager UI before 5.4.3 allow remote authenticated users to inject arbitrary web … Cloudera Manager 5.4.3+ Fix from $1,6002019-11-26 HIGH 8.8 CVE-2015-7831 In Cloudera Hue, there is privilege escalation by a read-only user when CDH 5.x brefore 5.4.9 is used. Cdh 5.4.9+ Fix from $1,9502019-11-26 HIGH 8.8 CVE-2016-4572 In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges. Cdh Mitigation only Fix from $1,9502019-11-26 HIGH 7.5 CVE-2016-5724 Cloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles. Cdh 5.9.0+ Fix from $1,9502019-11-26 MEDIUM 6.5 CVE-2016-3131 Cloudera CDH before 5.6.1 allows authorization bypass via direct internal API calls. Cdh 5.3.10 / 5.4.10+ Fix from $1,6002019-11-26 MEDIUM 6.5 CVE-2016-3192 Cloudera Manager 5.x before 5.7.1 places Sensitive Data in cleartext Readable Files. Cloudera Manager 5.5.4 / 5.6.1+ Fix from $1,6002019-11-26 MEDIUM 6.5 CVE-2016-6353 Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security… Cdh 5.7.0+ Fix from $1,6002019-11-26 HIGH 7.5 CVE-2015-6495 There is Sensitive Information in Cloudera Manager before 5.4.6 Diagnostic Support Bundles. Cloudera Manager 4.8.6 / 5.0.7+ Fix from $1,9502019-11-26 HIGH 8.1 CVE-2018-11744 Cloudera Manager through 5.15 has Incorrect Access Control. Cloudera Manager after 6.1.0 Fix from $1,9502019-07-11 HIGH 7.5 CVE-2017-9325 The provided secure solrconfig.xml sample configuration does not enforce Sentry authorization on /update/json/docs. Cdh after 5.11.1 Fix from $1,9502019-07-03 HIGH 7.5 CVE-2017-9326 The keystore password for the Spark History Server may be exposed in unsecured files under the /var/run/cloudera-scm-agent directory managed by Cloud… Cloudera Manager Mitigation only Fix from $1,9502019-07-03 MEDIUM 6.5 CVE-2017-9327 Secret data of processes managed by CM is not secured by file permissions. Cloudera Manager No fix yet Fix from $1,6002019-07-03 CRITICAL 9.8 CVE-2018-11215 Remote code execution is possible in Cloudera Data Science Workbench version 1.3.0 and prior releases via unspecified attack vectors. Data Science Workbench after 1.3.0 Fix from $2,3002019-07-03 MEDIUM 5.3 CVE-2018-15665 An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.2.x through 1.4.0. Unauthenticated users can get a list of user accounts. Data Science Workbench after 1.4.0 Fix from $1,6002019-06-21 MEDIUM 6.1 CVE-2018-15913 An issue was discovered in Cloudera Manager 5.x through 5.15.0. One type of page in Cloudera Manager uses a 'returnUrl' parameter to redirect the use… Cloudera Manager after 5.15.0 Fix from $1,6002019-06-20