Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
cloudera cloudera manager vulnerabilities and exploits
(subscribe to this query)
5
CVSSv2
CVE-2016-4950
Cloudera Manager 5.5 and previous versions allows remote malicious users to enumerate user sessions via a request to /api/v11/users/sessions.
Cloudera Manager
4.3
CVSSv2
CVE-2016-4948
Multiple cross-site scripting (XSS) vulnerabilities in Cloudera Manager 5.5 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) Template Name field when renaming a template; (2) KDC Server host, (3) Kerberos Security Realm, (4) Ke...
Cloudera Manager
2.1
CVSSv2
CVE-2014-8733
Cloudera Manager 5.2.0, 5.2.1, and 5.3.0 stores the LDAP bind password in plaintext in unspecified world-readable files under /etc/hadoop, which allows local users to obtain this password.
Cloudera Cloudera Manager 5.2.0
Cloudera Cloudera Manager 5.2.1
Cloudera Cloudera Manager 5.3.0
4
CVSSv2
CVE-2014-0220
Cloudera Manager prior to 4.8.3 and 5.x prior to 5.0.1 allows remote authenticated users to obtain sensitive configuration information via the API.
Cloudera Cloudera Manager 4.7.2
Cloudera Cloudera Manager 4.8.1
Cloudera Cloudera Manager 4.5.0
Cloudera Cloudera Manager 4.5.2
Cloudera Cloudera Manager 4.1.1
Cloudera Cloudera Manager 4.6.1
Cloudera Cloudera Manager
Cloudera Cloudera Manager 4.1.4
Cloudera Cloudera Manager 5.0.0
Cloudera Cloudera Manager 4.5.3
Cloudera Cloudera Manager 4.0.1
Cloudera Cloudera Manager 4.6.0
Cloudera Cloudera Manager 4.0.3
Cloudera Cloudera Manager 4.6.2
Cloudera Cloudera Manager 4.1.2
Cloudera Cloudera Manager 4.1
Cloudera Cloudera Manager 4.1.3
Cloudera Cloudera Manager 4.0.2
Cloudera Cloudera Manager 4.6.3
Cloudera Cloudera Manager 4.5.4
Cloudera Cloudera Manager 4.5.1
6.5
CVSSv2
CVE-2012-2230
Cloudera Manager 3.7.x prior to 3.7.5 and Service and Configuration Manager 3.5, when Kerberos is not enabled, does not properly install taskcontroller.cfg, which allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors, a different vulnera...
Cloudera Cloudera Manager 3.7.2
Cloudera Cloudera Manager 3.7.4
Cloudera Cloudera Manager 3.7.1
Cloudera Cloudera Manager 3.7.3
Cloudera Cloudera Manager 3.7.0
Cloudera Cloudera Service And Configuration Manager 3.5
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
type confusion
IMAP
CVE-2024-36103
CVE-2024-28995
CVE-2024-37325
CVE-2024-30078
CVE-2024-30082
SQL injection
CVE-2024-30052
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3