Sign inStart freeBook a demo

Cloudera vulnerabilitiesNone on the known-exploited list.

Vendor
The short answer

Cloudera has 52 published vulnerabilities across 13 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Cloudera Manager, with 22. If you run Cloudera software, patch the exploited flaws first.

See the exploited flaws

We keep watching the known-exploited list.

Products

Which Cloudera products have the most vulnerabilities?

Cloudera Manager leads with 22 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.

  1. Cloudera Manager22
  2. Cdh11
  3. Hue6
  4. Data Science Workbench5
  5. Manager3
  6. Data Engineering2
  7. Cloudera Service and Configuration Manager1
  8. Hadoop1
  9. Cloudera Cdh1
  10. Key Trustee Server1
Published vulnerabilities
Known exploited

Which Cloudera vulnerabilities are being exploited?

This is the list that matters most: flaws criminals are using now.

None of Cloudera's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.

Exploit likelihood

Which Cloudera flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. 4.8%
    CVE-2012-1574Medium

    The Kerberos/MapReduce security functionality in Apache Hadoop 0.20.203.0 through 0.20.205.0, 0.23.x before 0.23.2, and 1.0.x before 1.0.2, as used in Cloudera CDH CDH3u0 through CDH3u2, Cloudera hadoop-0.20-sbin...

    CVSS6.5Published12 Apr 2012
  2. 2.4%
    CVE-2018-11215Critical

    Remote code execution is possible in Cloudera Data Science Workbench version 1.3.0 and prior releases via unspecified attack vectors.

    CVSS9.8Published3 Jul 2019
  3. 1.9%
    CVE-2012-2230Medium

    Cloudera Manager 3.7.x before 3.7.5 and Service and Configuration Manager 3.5, when Kerberos is not enabled, does not properly install taskcontroller.cfg, which allows remote authenticated users to impersonate...

    CVSS6.5Published12 Apr 2012
  4. 1.8%
    CVE-2014-0220Medium

    Cloudera Manager before 4.8.3 and 5.x before 5.0.1 allows remote authenticated users to obtain sensitive configuration information via the API.

    CVSS4.0Published10 Jun 2014
  5. 1.7%
    CVE-2025-3884High

    Cloudera Hue Ace Editor Directory Traversal Information Disclosure Vulnerability.

    CVSS7.5Published22 May 2025
  6. 1.6%
    CVE-2016-4949High

    Cloudera Manager 5.5 and earlier allows remote attackers to obtain sensitive information via a (1) stderr.log or (2) stdout.log value in the filename parameter to /cmf/process/<process_id>/logs.

    CVSS7.5Published7 Mar 2017
  7. 1.6%
    CVE-2016-4950High

    Cloudera Manager 5.5 and earlier allows remote attackers to enumerate user sessions via a request to /api/v11/users/sessions.

    CVSS7.5Published7 Mar 2017
  8. 1.5%
    CVE-2015-8094Medium

    Open redirect vulnerability in Cloudera HUE before 3.10.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the next parameter.

    CVSS6.1Published22 May 2018
  9. 1.4%
    CVE-2016-6605High

    Impala in CDH 5.2.0 through 5.7.2 and 5.8.0 allows remote attackers to bypass Setry authorization.

    CVSS7.5Published10 Apr 2017
Every product

All Cloudera products we track.

12 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.

This directory lists the 12 Cloudera products with at least one tracked version, of 13 in our catalogue.

Precursor Intelligence

Running Cloudera? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Start free →Book a demo

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

Our catalogue lists 52 published vulnerabilities across 13 products and 259 versions from Cloudera.

None of Cloudera's vulnerabilities is on the list of flaws known to be exploited today.

Cloudera Manager, with 22 published vulnerabilities. Its own page lists the ones known to be exploited.

Create a Precursor Intelligence account and track the Cloudera products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.

Keep exploring