Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Cloudera Manager 5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Template Name field when renaming a template; 2 KDC Server host, 3 Kerberos Security Realm, 4 Kerberos Encryption Types, 5 Advanced...

PT-2017-8628

Name of the Vulnerable Software and Affected Versions Cloudera Manager versions 5.5 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via several fields in the Kerberos wizard, including the Template Name field, KDC Server host, Kerberos Security...

CVE-2016-4948: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Cloudera Manager 5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Template Name field when renaming a template; 2 KDC Server host, 3 Kerberos Security Realm, 4 Kerberos Encryption Types, 5 Advanced...