← Back

Cloudera

cloudera

51 CVEs • 13 products

Products (13)

Click to collapse
Toggle
Cloudera Manager
cloudera_manager
22 CVEs
Cdh
cdh
11 CVEs
Hue
hue
6 CVEs
Data Science Workbench
data_science_workbench
5 CVEs
Manager
manager
3 CVEs
Data Engineering
data_engineering
2 CVEs
Cloudera Cdh
cloudera_cdh
1 CVE
Hadoop
hadoop
1 CVE
Cloudera Service And Configuration Manager
cloudera_service_and_configuration_manager
1 CVE
Navigator
navigator
1 CVE
Key Trustee Server
key_trustee_server
1 CVE
Navigator Key Trustee Kms
navigator_key_trustee_kms
1 CVE
Data Platform
data_platform
0 CVEs

CVEs (51)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-3884
1Cloudera
1Hue
Aug 15, 2025
May 22, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Cloudera Hue Ace Editor Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cloudera Hue. Authentication is...Show more
Cloudera Hue Ace Editor Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cloudera Hue. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Ace Editor web application. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose information in the context of the service account. Was ZDI-CAN-24332.Show less
CVE-2021-32483
1Cloudera
1Cloudera Manager
Nov 21, 2024
Nov 8, 2021
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges to view the restricted Dashboard.
CVE-2021-30132
1Cloudera
1Cloudera Manager
Nov 21, 2024
Nov 8, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges.
CVE-2021-32482
1Cloudera
1Cloudera Manager
Nov 21, 2024
Nov 8, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS via the path parameter.
CVE-2021-32481
1Cloudera
1Hue
Nov 21, 2024
Nov 8, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Cloudera Hue 4.6.0 allows XSS via the type parameter.
CVE-2021-29994
1Cloudera
1Hue
Nov 21, 2024
Nov 8, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Cloudera Hue 4.6.0 allows XSS.
CVE-2021-29243
1Cloudera
1Cloudera Manager
Nov 21, 2024
Nov 8, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS.
CVE-2021-3167
1Cloudera
1Data Engineering
Nov 21, 2024
Mar 15, 2021
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
In Cloudera Data Engineering (CDE) 1.3.0, JWT authentication tokens are exposed to administrators in virtual cluster server logs.
CVE-2020-26936
1Cloudera
1Data Engineering
Nov 21, 2024
Nov 26, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Cloudera Data Engineering (CDE) before 1.1 was vulnerable to a CSRF attack.
CVE-2019-14449
1Cloudera
1Cloudera Manager
Nov 21, 2024
Nov 26, 2019
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
An issue was discovered in Cloudera Manager 5.x before 5.16.2, 6.0.x before 6.0.2, and 6.1.x before 6.1.1. Malicious impala queries can result in Cross Site Scripting (XSS) when viewed within this product.
CVE-2019-7319
1Cloudera
1Cdh
Nov 21, 2024
Nov 26, 2019
N/A· v4
8.3 HIGH· v3
6.5 MEDIUM· v2
An issue was discovered in Cloudera Hue 6.0.0 through 6.1.0. When using one of following authentication backends: LdapBackend, PamBackend, SpnegoDjangoBackend, RemoteUserDjangoBackend, SAML2Backend, OpenIDBackend, or OAu...Show more
An issue was discovered in Cloudera Hue 6.0.0 through 6.1.0. When using one of following authentication backends: LdapBackend, PamBackend, SpnegoDjangoBackend, RemoteUserDjangoBackend, SAML2Backend, OpenIDBackend, or OAuthBackend, external users are created with superuser privileges.Show less
CVE-2018-20090
1Cloudera
1Data Science Workbench
Nov 21, 2024
Nov 26, 2019
N/A· v4
8.3 HIGH· v3
6.5 MEDIUM· v2
An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2. Authenticated users can bypass project permission checks and gain read-write access to any project folder.
CVE-2017-7399
1Cloudera
1Cloudera Manager
Nov 21, 2024
Nov 26, 2019
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
Cloudera Manager 5.8.x before 5.8.5, 5.9.x before 5.9.2, and 5.10.x before 5.10.1 allows a read-only Cloudera Manager user to discover the usernames of other users and elevate the privileges of those users.
CVE-2016-9271
1Cloudera
1Cloudera Manager
Nov 21, 2024
Nov 26, 2019
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cloudera Manager 5.7.x before 5.7.6, 5.8.x before 5.8.4, and 5.9.x before 5.9.1 allows XSS in the help search feature.
CVE-2018-17860
1Cloudera
1Cdh
Nov 21, 2024
Nov 26, 2019
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Cloudera CDH has Insecure Permissions because ALL cannot be revoked.This affects 5.x through 5.15.1 and 6.x through 6.0.1.
CVE-2015-4457
1Cloudera
1Cloudera Manager
Nov 21, 2024
Nov 26, 2019
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Multiple cross-site scripting (XSS) vulnerabilities in the Cloudera Manager UI before 5.4.3 allow remote authenticated users to inject arbitrary web script or HTML using unspecified vectors.
CVE-2016-6353
1Cloudera
1Cdh
Nov 21, 2024
Nov 26, 2019
N/A· v4
6.5 MEDIUM· v3
3.5 LOW· v2
Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the RealTimeGetHandler.
CVE-2016-5724
1Cloudera
1Cdh
Nov 21, 2024
Nov 26, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Cloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles.
CVE-2016-4572
1Cloudera
1Cdh
Nov 21, 2024
Nov 26, 2019
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges.
CVE-2016-3192
1Cloudera
1Cloudera Manager
Nov 21, 2024
Nov 26, 2019
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Cloudera Manager 5.x before 5.7.1 places Sensitive Data in cleartext Readable Files.