Skip to content
Noroxi

Cloudera records

52 published records for vendor cloudera.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
3.8%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

52 records
  • CVE-2018-11215
    40Plan

    Remote code execution is possible in Cloudera Data Science Workbench version 1.3.0 and prior releases via unspecified attack vectors.

    CriticalCVSS 9.8No exploitEPSS 2%

    cloudera · data science workbenchJul 3, 2019

  • CVE-2021-30132
    39Monitor

    Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges.

    CriticalCVSS 9.8No exploitEPSS 1%

    cloudera · cloudera managerNov 8, 2021

  • CVE-2018-20091
    39Monitor

    An SQL injection vulnerability was found in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2.

    CriticalCVSS 9.9No exploitEPSS 0%

    cloudera · data science workbenchJun 7, 2019

  • CVE-2015-4166
    39Monitor

    Cloudera Key Trustee Server before 5.4.3 does not store keys synchronously, which might allow attackers to have unspecified impact via vecto

    CriticalCVSS 9.8No exploitEPSS 0%

    cloudera · key trustee serverMar 23, 2017

  • CVE-2015-7831
    35Monitor

    In Cloudera Hue, there is privilege escalation by a read-only user when CDH 5.x brefore 5.4.9 is used.

    HighCVSS 8.8No exploitEPSS 1%

    cloudera · cdhNov 26, 2019

  • CVE-2017-15536
    35Monitor

    An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.x before 1.2.0.

    HighCVSS 8.8No exploitEPSS 0%

    cloudera · data science workbenchFeb 4, 2018

  • CVE-2017-7399
    35Monitor

    Cloudera Manager 5.8.x before 5.8.5, 5.9.x before 5.9.2, and 5.10.x before 5.10.1 allows a read-only Cloudera Manager user to discover the u

    HighCVSS 8.8No exploitEPSS 0%

    cloudera · cloudera managerNov 26, 2019

  • CVE-2016-4572
    35Monitor

    In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges.

    HighCVSS 8.8No exploitEPSS 0%

    cloudera · cdhNov 26, 2019

  • CVE-2020-26936
    35Monitor

    Cloudera Data Engineering (CDE) before 1.1 was vulnerable to a CSRF attack.

    HighCVSS 8.8No exploitEPSS 0%

    cloudera · data engineeringNov 26, 2020

  • CVE-2019-7319
    33Monitor

    An issue was discovered in Cloudera Hue 6.0.0 through 6.1.0.

    HighCVSS 8.3No exploitEPSS 1%

    cloudera · cdhNov 26, 2019

  • CVE-2018-20090
    33Monitor

    An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2.

    HighCVSS 8.3No exploitEPSS 0%

    cloudera · data science workbenchNov 26, 2019

  • CVE-2018-11744
    32Monitor

    Cloudera Manager through 5.15 has Incorrect Access Control.

    HighCVSS 8.1No exploitEPSS 0%

    cloudera · cloudera managerJul 11, 2019

  • CVE-2025-3884
    31Monitor

    Cloudera Hue Ace Editor Directory Traversal Information Disclosure Vulnerability

    HighCVSS 7.5No exploitEPSS 1%

    cloudera · hueMay 21, 2025

  • CVE-2016-4949
    30Monitor

    Cloudera Manager 5.5 and earlier allows remote attackers to obtain sensitive information via a (1) stderr.log or (2) stdout.log value in the

    HighCVSS 7.5No exploitEPSS 1%

    cloudera · managerMar 7, 2017

  • CVE-2016-4950
    30Monitor

    Cloudera Manager 5.5 and earlier allows remote attackers to enumerate user sessions via a request to /api/v11/users/sessions.

    HighCVSS 7.5No exploitEPSS 1%

    cloudera · managerMar 7, 2017

  • CVE-2016-6605
    30Monitor

    Impala in CDH 5.2.0 through 5.7.2 and 5.8.0 allows remote attackers to bypass Setry authorization.

    HighCVSS 7.5No exploitEPSS 1%

    cloudera · cdhApr 10, 2017

  • CVE-2016-5724
    30Monitor

    Cloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles.

    HighCVSS 7.5No exploitEPSS 1%

    cloudera · cdhNov 26, 2019

  • CVE-2015-6495
    30Monitor

    There is Sensitive Information in Cloudera Manager before 5.4.6 Diagnostic Support Bundles.

    HighCVSS 7.5No exploitEPSS 1%

    cloudera · cloudera managerNov 26, 2019

  • CVE-2017-9325
    30Monitor

    The provided secure solrconfig.xml sample configuration does not enforce Sentry authorization on /update/json/docs.

    HighCVSS 7.5No exploitEPSS 0%

    cloudera · cdhJul 3, 2019

  • CVE-2017-9326
    30Monitor

    The keystore password for the Spark History Server may be exposed in unsecured files under the /var/run/cloudera-scm-agent directory managed

    HighCVSS 7.5No exploitEPSS 0%

    cloudera · cloudera managerJul 3, 2019

  • CVE-2018-17860
    28Monitor

    Cloudera CDH has Insecure Permissions because ALL cannot be revoked.This affects 5.x through 5.15.1 and 6.x through 6.0.1.

    HighCVSS 7.2No exploitEPSS 0%

    cloudera · cdhNov 26, 2019

  • CVE-2012-1574
    27Monitor

    The Kerberos/MapReduce security functionality in Apache Hadoop 0.20.203.0 through 0.20.205.0, 0.23.x before 0.23.2, and 1.0.x before 1.0.2,

    MediumCVSS 6.5No exploitEPSS 4%

    apache · hadoopApr 12, 2012

  • CVE-2012-2230
    27Monitor

    Cloudera Manager 3.7.x before 3.7.5 and Service and Configuration Manager 3.5, when Kerberos is not enabled, does not properly install taskc

    MediumCVSS 6.5No exploitEPSS 1%

    cloudera · cloudera managerApr 12, 2012

  • CVE-2014-0229
    26Monitor

    Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x before 5.0.2, do not check authorization for the (1)

    MediumCVSS 6.5No exploitEPSS 1%

    cloudera · cdhMar 23, 2017

  • CVE-2017-9327
    26Monitor

    Secret data of processes managed by CM is not secured by file permissions.

    MediumCVSS 6.5No exploitEPSS 1%

    cloudera · cloudera managerJul 3, 2019