Cloudera

Records51All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high17CVSS 7.0–8.9

Exploited now

Cloudera records in CISA KEV

No Cloudera vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Data Engineering · all components

TI-2020-16363 CVE-2020-26936 · GHSA-c96p-67jc-gfv2

LOW 38

Cloudera Data Engineering (CDE) before 1.1 was vulnerable to a CSRF attack.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00454 Published 2020-11-26 No fix listed CWE-352

TI-2021-02250 CVE-2021-3167 · GHSA-22x7-r7fc-8grh

LOW 31

In Cloudera Data Engineering (CDE) 1.3.0, JWT authentication tokens are exposed to administrators in virtual cluster server logs.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01149 Published 2021-03-15 No fix listed CWE-532