What’s Vulnerable › Vulnerabilities

CVE-2018-5798

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-06-07 · updated 2026-06-17
• Weakness: CWE-79

Description

This CVE relates to an unspecified cross site scripting vulnerability in Cloudera Manager.

Affected products

• Cloudera Manager: before 5.12; 5.12, 5.12.1, 5.12.2, 5.13, 5.13.1, 5.14.0 (+1) — fixed in 5.12

How to fix

Upgrade to a fixed version: Cloudera Manager 5.12. Check the vendor advisory for mitigations.

References

• https://www.cloudera.com
• https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html
• https://www.cloudera.com
• https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html

Get alerted when CVE-2018-5798 or the next vulnerability affects your stack