Hue Security Vulnerabilities and Issues — Hue CVE List

Lucene search

ClouderaHue

4 matches found

CVE•added 2021/11/08 1:15 p.m.•38 views

CVE-2021-29994

Cloudera Hue 4.6.0 allows XSS.

6.1CVSS6.2AI score0.0066EPSS

CVE•added 2021/11/08 1:15 p.m.•34 views

CVE-2021-32481

Cloudera Hue 4.6.0 allows XSS via the type parameter.

6.1CVSS5.9AI score0.00458EPSS

CVE•added 2018/05/22 6:29 p.m.•24 views

CVE-2015-8094

Open redirect vulnerability in Cloudera HUE before 3.10.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the next parameter.

6.1CVSS6.2AI score0.00462EPSS

CVE•added 2017/03/07 4:59 p.m.•24 views

CVE-2016-4946

Multiple cross-site scripting (XSS) vulnerabilities in Cloudera HUE 3.9.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) First name or (2) Last name field in the HUE Users page.

6.1CVSS6AI score0.00196EPSS