Cloudera

Records51All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high17CVSS 7.0–8.9

Exploited now

Cloudera records in CISA KEV

No Cloudera vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records in Data Science Workbench · all components

TI-2018-07979 CVE-2018-11215 · GHSA-pq9f-gcj3-hc3c

MEDIUM 47

Remote code execution is possible in Cloudera Data Science Workbench version 1.3.0 and prior releases via unspecified attack vectors.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02399 Published 2019-07-03 No fix listed CWE-200

TI-2018-14236 CVE-2018-20091 · GHSA-rm2v-wh2x-rj6w

MEDIUM 44

An SQL injection vulnerability was found in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2.

CVSS 3.0CRITICAL 9.9 Network Low privileges No interaction EPSS 0.0099 Published 2019-06-07 No fix listed CWE-89

TI-2017-11358 CVE-2017-15536 · GHSA-6gh6-8c4x-5346

MEDIUM 40

An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.x before 1.2.0.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.00918 Published 2018-02-05 No fix listed CWE-269

TI-2018-14235 CVE-2018-20090 · GHSA-p4rw-m677-p78f

LOW 38

An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.00832 Published 2019-11-26 No fix listed CWE-276

TI-2018-11160 CVE-2018-15665 · GHSA-v9fc-8cwf-fm4g

LOW 26

An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.2.x through 1.4.0.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01195 Published 2019-06-21 No fix listed CWE-200