VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Nov 26, 2019· Updated Jun 17, 2026

CVE-2019-14449

CVE-2019-14449

Description

An issue was discovered in Cloudera Manager 5.x before 5.16.2, 6.0.x before 6.0.2, and 6.1.x before 6.1.1. Malicious impala queries can result in Cross Site Scripting (XSS) when viewed within this product.

Affected products

6
  • Cloudera/Manager5 versions
    cpe:2.3:a:cloudera:cloudera_manager:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:cloudera:cloudera_manager:*:*:*:*:*:*:*:*range: >=5.0.0,<5.16.2
    • cpe:2.3:a:cloudera:cloudera_manager:6.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudera:cloudera_manager:6.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cloudera:cloudera_manager:6.1.0:*:*:*:*:*:*:*
    • (no CPE)range: <5.16.2, 6.0.x < 6.0.2, 6.1.x < 6.1.1
  • Cloudera/Managerdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.