Vulnerabilities > Cloudera > Data Science Workbench > 1.2.2

DATE CVE VULNERABILITY TITLE RISK
2019-07-03 CVE-2018-11215 OS Command Injection vulnerability in Cloudera Data Science Workbench
Remote code execution is possible in Cloudera Data Science Workbench version 1.3.0 and prior releases via unspecified attack vectors.
network
low complexity
cloudera CWE-78
critical
 9.8
9.8
2019-06-21 CVE-2018-15665 Information Exposure vulnerability in Cloudera Data Science Workbench
An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.2.x through 1.4.0.
network
low complexity
cloudera CWE-200
5.3
5.3