HA
Product
Hadoop
37
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 20Medium 6Low 0
Watch
Add Hadoop to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-15713 | 6.5 | Jan 19 | Vulnerability in Apache Hadoop 0.23.x, 2.x before 2.7.5, 2.8.x before 2.8.3, and 3.0.0-alpha through 3.0.0-beta1 allows a cluster user to expose private files owned by the user… Affected: 0.23.0 through 0.23.11; 2.2.0 through 2.8.2; 2.0.0; 2.0.1; 2.0.2; 2.0.3; +10 more |
| CVE-2014-0229 | 6.5 | Mar 23 | Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x before 5.0.2, do not check authorization for the (1) refreshNamenodes, (2) deleteBlockPool,… Affected: 0.23.0; 0.23.1; 0.23.3; 0.23.4; 0.23.5; 0.23.6; +16 more |
| CVE-2024-23454 | 6.2 | Sep 25 | Apache Hadoop’s RunJar.run() does not set permissions for temporary directory by default Affected: before 3.4.0 |
| CVE-2015-1776 | 6.2 | Apr 19 | Apache Hadoop 2.6.x encrypts intermediate data generated by a MapReduce job and stores it along with the encryption key in a credentials file on disk when the Intermediate data… Affected: 2.6.0; 2.6.1; 2.6.2; 2.6.3; 2.6.4 |
| CVE-2017-3161 | 6.1 | Apr 26 | The HDFS web UI in Apache Hadoop before 2.7.0 is vulnerable to a cross-site scripting (XSS) attack through an unescaped query parameter Affected: through 2.6.5 |
| CVE-2016-5001 | 5.5 | Aug 30 | This is an information disclosure vulnerability in Apache Hadoop before 2.6.4 and 2.7.x before 2.7.2 in the short-circuit reads feature of HDFS Affected: through 2.6.3; 2.7.0; 2.7.1 |
Showing 6