CVE-2019-14449: Cloudera Manager

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue was discovered in Cloudera Manager 5.x before 5.16.2, 6.0.x before 6.0.2, and 6.1.x before 6.1.1. Malicious impala queries can result in Cross Site Scripting (XSS) when viewed within this product.

Affected products

• Cloudera Cloudera Manager: from 5.0.0, before 5.16.2 (fixed in 5.16.2); version 6.0.0 only; version 6.0.1 only; version 6.1.0 only

Published 2019-11-26. Last modified 2026-06-17.