Known vulnerabilities in DataStax Hyper-Converged Database - page 2

Software CPE: cpe:2.3:a:ibm_corporation:datastax_hyper-converged_database:*:*:*:*:*:*:*:*
Total vulnerabilities: 58
Public exploits: 6
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting DataStax Hyper-Converged Database DataStax Hyper-Converged Database is affected by 58 known vulnerabilities: 9 high, 41 medium, 8 low Critical High Medium Low

Vulnerabilities (58)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU133451 - Generation of Predictable Numbers or Identifiers
CVE-2026-45673
CWE-340 Medium
No
No
1.2.7 08.06.2026 SB2026060813
SB20260626101
SB2026070933
and 9 more
#VU133449 - Missing Release of Resource after Effective Lifetime
CVE-2026-45536
CWE-772 Low
No
No
1.2.7 08.06.2026 SB2026060813
SB20260626101
SB2026070933
and 6 more
#VU130216 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-41417
CWE-93 Medium
No
No
1.2.7 05.05.2026 SB20260505124
SB2026051351
SB2026051901
and 11 more
#VU130215 - Resource exhaustion
CVE-2026-42587
CWE-400 Medium
No
No
1.2.7 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 19 more
#VU130214 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42581
CWE-444 Medium
No
No
1.2.7 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 18 more
#VU130213 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-42586
CWE-93 High
No
No
1.2.7 05.05.2026 SB20260505124
SB2026060936
SB2026060963
and 3 more
#VU130212 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-42578
CWE-113 Medium
No
No
1.2.7 05.05.2026 SB20260505124
SB2026051907
SB20260528254
and 9 more
#VU130211 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42580
CWE-444 Medium
No
No
1.2.7 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 10 more
#VU130210 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42585
CWE-444 Medium
No
No
1.2.7 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 18 more
#VU130209 - Missing Release of Resource after Effective Lifetime
CVE-2026-42577
CWE-772 Medium
No
No
1.2.7 05.05.2026 SB20260505124
SB20260528254
SB2026090815
and 1 more
#VU130208 - Null Byte Interaction Error (Poison Null Byte)
CVE-2026-42579
CWE-626 Medium
No
No
1.2.7 05.05.2026 SB20260505124
SB2026060936
SB2026060963
and 11 more
#VU130206 - Allocation of Resources Without Limits or Throttling
CVE-2026-42583
CWE-770 Medium
No
No
1.2.7 05.05.2026 SB20260505124
SB2026052039
SB20260528254
and 15 more
#VU130205 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42584
CWE-444 Medium
No
No
1.2.7 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 18 more
#VU130204 - Resource exhaustion
CVE-2026-44248
CWE-400 Medium
No
No
1.2.7 05.05.2026 SB20260505124
SB2026060963
SB2026083158
and 2 more
#VU113028 - Permissions, Privileges, and Access Controls
CVE-2024-56433
CWE-264 Medium
No
No
1.2.5 17.07.2025 SB2025071777
SB2025071778
SB2025071779
and 6 more
#VU111062 - Permissions, Privileges, and Access Controls
CVE-2025-4598
CWE-264 Low
Available
No
1.2.5 11.06.2025 SB2025061128
SB2025061134
SB2025061152
and 19 more
#VU108111 - Heap-based Buffer Overflow
CVE-2021-45941
CWE-122 Medium
No
No
1.2.5 01.05.2025 SB2022010106
SB2025050122
SB2026042816
and 1 more
#VU108110 - Heap-based Buffer Overflow
CVE-2021-45940
CWE-122 Medium
No
No
1.2.5 01.05.2025 SB2022010105
SB2025050122
SB2026042816
and 1 more
#VU59358 - Uncontrolled Recursion
CVE-2021-3997
CWE-674 Low
No
No
1.2.5 10.01.2022 SB2022011041
SB2022011194
SB2022011325
and 10 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023
CWE-79 Low
Available
Exploited
1.2.5 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more


Showing elements 21 - 40 out of 58