Login Request a demo
CD
Product
Cdh
by Cloudera · last CVE Nov 26, 2019
11
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 0High 7Medium 3Low 1
Severity
All severities11Critical0High7Medium3Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Cdh to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-4572
8.8
1%
Nov 26
In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges
Affected: 5.5.0; 5.5.1; 5.5.2; 5.5.3; 5.5.4; 5.6.0; +2 more
CVE-2015-7831
8.8
1%
Nov 26
In Cloudera Hue, there is privilege escalation by a read-only user when CDH 5.x brefore 5.4.9 is used
Affected: 5.0.0 before 5.4.9
CVE-2019-7319
8.3
1%
Nov 26
An issue was discovered in Cloudera Hue 6.0.0 through 6.1.0
Affected: 6.0.0; 6.0.1; 6.1.0
CVE-2016-5724
7.5
1%
Nov 26
Cloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles
Affected: before 5.9.0
CVE-2017-9325
7.5
1%
Jul 3
The provided secure solrconfig.xml sample configuration does not enforce Sentry authorization on /update/json/docs
Affected: through 5.8.0; 5.8.2 through 5.9.2; 5.10.0 through 5.10.1; 5.11.0 through 5.11.1
CVE-2016-6605
7.5
1%
Apr 10
Impala in CDH 5.2.0 through 5.7.2 and 5.8.0 allows remote attackers to bypass Setry authorization
Affected: 5.2.0; 5.2.1; 5.2.2; 5.2.3; 5.2.4; 5.2.5; +34 more
CVE-2018-17860
7.2
1%
Nov 26
Cloudera CDH has Insecure Permissions because ALL cannot be revoked.This affects 5.x through 5.15.1 and 6.x through 6.0.1
Affected: 5.0.0 through 5.14.0; 5.15.0; 5.15.1; 6.0.0; 6.0.1
Showing 7