VulnerabilityModified

CVE-2019-14449

Malicious impala queries can result in Cross Site Scripting (XSS) when viewed within this product.

MEDIUM 5.4EPSS 0.52%

Does this matter?

Lower severity and a low EPSS score (0.52%). Track it; it rarely justifies an emergency change on its own.

Description

An issue was discovered in Cloudera Manager 5.x before 5.16.2, 6.0.x before 6.0.2, and 6.1.x before 6.1.1. Malicious impala queries can result in Cross Site Scripting (XSS) when viewed within this product.

CVSS 3.1: 5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS: 0.52% probability · 43th percentile
CISA KEV: Not listed
Weakness: CWE-79
Affected: cloudera/cloudera manager
Source: cve@mitre.org

References

https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#concept_sky_fq1_cjbVendor Advisory
https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#concept_sky_fq1_cjbVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.