Vulnerability index

Browse CVEs

12 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Hue HIGH 7.5
CVE-2025-3884

Cloudera Hue Ace Editor Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive in…

Mitigation only
Fix from $1,950 2025-05-22
Cloudera Manager CRITICAL 9.8
CVE-2021-30132

Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges.

Mitigation only
Fix from $2,300 2021-11-08
Cloudera Manager MEDIUM 5.3
CVE-2021-32483

Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges to view the restricted Dashboard.

Mitigation only
Fix from $1,600 2021-11-08
Hue MEDIUM 6.1
CVE-2021-29994

Cloudera Hue 4.6.0 allows XSS.

No fix yet
Fix from $1,600 2021-11-08
Hue MEDIUM 6.1
CVE-2021-32481

Cloudera Hue 4.6.0 allows XSS via the type parameter.

Mitigation only
Fix from $1,600 2021-11-08
Data Engineering MEDIUM 6.5
CVE-2021-3167

In Cloudera Data Engineering (CDE) 1.3.0, JWT authentication tokens are exposed to administrators in virtual cluster server logs.

Mitigation only
Fix from $1,600 2021-03-15
Cdh HIGH 8.3
CVE-2019-7319

An issue was discovered in Cloudera Hue 6.0.0 through 6.1.0. When using one of following authentication backends: LdapBackend, PamBackend, SpnegoDjan…

Mitigation only
Fix from $1,950 2019-11-26
Cdh HIGH 8.8
CVE-2016-4572

In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges.

Mitigation only
Fix from $1,950 2019-11-26
Cloudera Manager HIGH 7.5
CVE-2017-9326

The keystore password for the Spark History Server may be exposed in unsecured files under the /var/run/cloudera-scm-agent directory managed by Cloud…

Mitigation only
Fix from $1,950 2019-07-03
Cloudera Manager MEDIUM 6.5
CVE-2017-9327

Secret data of processes managed by CM is not secured by file permissions.

No fix yet
Fix from $1,600 2019-07-03
Cdh HIGH 7.5
CVE-2016-6605

Impala in CDH 5.2.0 through 5.7.2 and 5.8.0 allows remote attackers to bypass Setry authorization.

Mitigation only
Fix from $1,950 2017-04-10
Cloudera Manager MEDIUM 6.5
CVE-2012-2230

Cloudera Manager 3.7.x before 3.7.5 and Service and Configuration Manager 3.5, when Kerberos is not enabled, does not properly install taskcontroller…

Mitigation only
Fix from $1,600 2012-04-12