Login Request a demo
MA
Product
Manager
by Cloudera · last CVE Mar 7, 2017
3
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 2Medium 1Low 0
Severity
All severities3Critical0High2Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-4950
7.5
2%
Mar 7
Cloudera Manager 5.5 and earlier allows remote attackers to enumerate user sessions via a request to /api/v11/users/sessions
Affected: through 5.5.0
CVE-2016-4949
7.5
2%
Mar 7
Cloudera Manager 5.5 and earlier allows remote attackers to obtain sensitive information via a (1) stderr.log or (2) stdout.log value in the filename parameter to…
Affected: through 5.5.0
CVE-2016-4948
6.1
1%
Mar 7
Multiple cross-site scripting (XSS) vulnerabilities in Cloudera Manager 5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Template Name…
Affected: through 5.5.0
Showing 3