Known vulnerabilities in Storage Ceph 6.1z3 - page 2

Vendor: IBM Corporation
Software: Storage Ceph
Version: 6.1z3
Software CPE: cpe:2.3:a:ibm_corporation:storage_ceph:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 41
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Storage Ceph version 6.1z3 Storage Ceph 6.1z3 is affected by 41 vulnerabilities: 3 high, 26 medium, 12 low Critical High Medium Low

Vulnerabilities (41)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105983 - Resource exhaustion
CVE-2025-30204		 CWE-400 Medium
No
No
 7.1z6 24.03.2025 SB2025032475
SB2025032730
SB2025040333
and 97 more
#VU105452 - Server-Side Request Forgery (SSRF)
CVE-2025-27152		 CWE-918 Medium
Public exploit available
No
 8.1z1 07.03.2025 SB2025030777
SB2025031918
SB2025032417
and 42 more
#VU101894 - Insufficient Technical Documentation
CVE-2024-51744		 CWE-1059 Low
No
No
 7.1z6 23.12.2024 SB2024122304
SB2024122309
SB20241230139
and 21 more
#VU101777 - Improper Authorization
CVE-2024-45337		 CWE-285 Medium
Public exploit available
No
 8.1z1 13.12.2024 SB2024121332
SB2024121333
SB2024121334
and 93 more
#VU101383 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-36621		 CWE-362 Low
No
No
 8.1z1 10.12.2024 SB2024121030
SB2024121039
SB2024121040
and 9 more
#VU99567 - Resource exhaustion
CVE-2024-49767		 CWE-400 Medium
No
No
 8.1 31.10.2024 SB2024103173
SB2024103176
SB2024110601
and 30 more
#VU98048 - Improper Authentication
CVE-2024-47191		 CWE-287 Low
No
No
 8.1 05.10.2024 SB2024100508
SB2024100513
SB2024100514
and 19 more
#VU96055 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-42353		 CWE-601 Low
No
No
 8.1 15.08.2024 SB2024081552
SB2024081555
SB2024081556
and 44 more
#VU89210 - Incorrect Authorization
CVE-2023-6152		 CWE-863 Low
No
No
 7.1z3 07.05.2024 SB2024050715
SB2024050717
SB2024050718
and 8 more
#VU89149 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-34069		 CWE-94 Medium
No
No
 8.1 06.05.2024 SB2024050606
SB2024050723
SB2024050930
and 54 more
#VU87845 - Improper Authorization
CVE-2024-1313		 CWE-285 Medium
No
No
 7.1z3 27.03.2024 SB2024032711
SB2024043089
SB2024050720
and 10 more
#VU87538 - Resource exhaustion
CVE-2024-28180		 CWE-400 Medium
No
No
 7.1z3 14.03.2024 SB2024031446
SB2024031447
SB2024031448
and 106 more
#VU86049 - Insufficient Verification of Data Authenticity
CVE-2024-24557		 CWE-345 Medium
No
No
 8.1z1 02.02.2024 SB2024020242
SB2024032237
SB2024032712
and 18 more
#VU82558 - Cross-Site Request Forgery (CSRF)
CVE-2023-45857		 CWE-352 Low
No
No
 8.1 30.10.2023 SB2023103024
SB2023113014
SB2023121224
and 41 more
#VU82548 - Inefficient Algorithmic Complexity
CVE-2023-46136		 CWE-407 Medium
No
No
 8.1 30.10.2023 SB2023103003
SB2023103183
SB2023112907
and 73 more
#VU80323 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2023-26136		 CWE-1321 High
No
No
 8.1 04.09.2023 SB2023090411
SB2023090423
SB2023090816
and 42 more
#VU77530 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-29404		 CWE-94 Medium
No
No
 - 19.06.2023 SB2023061954
SB2023061955
SB2023061956
and 44 more
#VU72340 - Improper input validation
CVE-2023-23934		 CWE-20 Low
No
No
 8.1 16.02.2023 SB2023021673
SB2023031332
SB2023031613
and 33 more
#VU72339 - Resource exhaustion
CVE-2023-25577		 CWE-400 Medium
No
No
 8.1 16.02.2023 SB2023021673
SB2023022875
SB2023031332
and 49 more
#VU71398 - Insufficient Verification of Data Authenticity
CVE-2022-23491		 CWE-345 High
No
No
 8.1 20.01.2023 SB2023012034
SB2023012035
SB2023012036
and 51 more


Showing elements 21 - 40 out of 41