| CVE-2025-3884 | 높음7.5 | Cloudera Hue Ace Editor Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cloudera Hue. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the Ace Editor web appl | 22/05/2025 |
| CVE-2021-32483 | 보통5.3 | Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges to view the restricted Dashboard. | 08/11/2021 |
| CVE-2021-30132 | 심각9.8 | Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges. | 08/11/2021 |
| CVE-2021-32482 | 보통6.1 | Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS via the path parameter. | 08/11/2021 |
| CVE-2021-32481 | 보통6.1 | Cloudera Hue 4.6.0 allows XSS via the type parameter. | 08/11/2021 |
| CVE-2021-29994 | 보통6.1 | Cloudera Hue 4.6.0 allows XSS. | 08/11/2021 |
| CVE-2021-29243 | 보통6.1 | Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS. | 08/11/2021 |
| CVE-2021-3167 | 보통6.5 | In Cloudera Data Engineering (CDE) 1.3.0, JWT authentication tokens are exposed to administrators in virtual cluster server logs. | 15/03/2021 |
| CVE-2020-26936 | 높음8.8 | Cloudera Data Engineering (CDE) before 1.1 was vulnerable to a CSRF attack. | 26/11/2020 |
| CVE-2019-14449 | 보통5.4 | An issue was discovered in Cloudera Manager 5.x before 5.16.2, 6.0.x before 6.0.2, and 6.1.x before 6.1.1. Malicious impala queries can result in Cross Site Scripting (XSS) when viewed within this product. | 26/11/2019 |
| CVE-2019-7319 | 높음8.3 | An issue was discovered in Cloudera Hue 6.0.0 through 6.1.0. When using one of following authentication backends: LdapBackend, PamBackend, SpnegoDjangoBackend, RemoteUserDjangoBackend, SAML2Backend, OpenIDBackend, or OAuthBackend, external users are created with superuser privileges. | 26/11/2019 |
| CVE-2018-20090 | 높음8.3 | An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2. Authenticated users can bypass project permission checks and gain read-write access to any project folder. | 26/11/2019 |
| CVE-2017-7399 | 높음8.8 | Cloudera Manager 5.8.x before 5.8.5, 5.9.x before 5.9.2, and 5.10.x before 5.10.1 allows a read-only Cloudera Manager user to discover the usernames of other users and elevate the privileges of those users. | 26/11/2019 |
| CVE-2016-9271 | 보통5.4 | Cloudera Manager 5.7.x before 5.7.6, 5.8.x before 5.8.4, and 5.9.x before 5.9.1 allows XSS in the help search feature. | 26/11/2019 |
| CVE-2018-17860 | 높음7.2 | Cloudera CDH has Insecure Permissions because ALL cannot be revoked.This affects 5.x through 5.15.1 and 6.x through 6.0.1. | 26/11/2019 |
| CVE-2015-4457 | 보통5.4 | Multiple cross-site scripting (XSS) vulnerabilities in the Cloudera Manager UI before 5.4.3 allow remote authenticated users to inject arbitrary web script or HTML using unspecified vectors. | 26/11/2019 |
| CVE-2016-6353 | 보통6.5 | Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the RealTimeGetHandler. | 26/11/2019 |
| CVE-2016-5724 | 높음7.5 | Cloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles. | 26/11/2019 |
| CVE-2016-4572 | 높음8.8 | In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges. | 26/11/2019 |
| CVE-2016-3192 | 보통6.5 | Cloudera Manager 5.x before 5.7.1 places Sensitive Data in cleartext Readable Files. | 26/11/2019 |