Vulnerabilities > Cloudera > Cloudera Manager > 5.13.0

DATE CVE VULNERABILITY TITLE RISK
2021-11-08 CVE-2021-29243 Cross-site Scripting vulnerability in Cloudera Manager
Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS.
network
cloudera CWE-79
4.3
4.3
2021-11-08 CVE-2021-32482 Cross-site Scripting vulnerability in Cloudera Manager
Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS via the path parameter.
network
cloudera CWE-79
4.3
4.3
2019-06-07 CVE-2018-6185 Cryptographic Issues vulnerability in Cloudera Manager and Navigator KEY Trustee KMS
In Cloudera Navigator Key Trustee KMS 5.12 and 5.13, incorrect default ACL values allow remote access to purge and undelete API calls on encryption zone keys.
network
low complexity
cloudera CWE-310
5.5
5.5