Known vulnerabilities in Storage Ceph - page 4

Vendor: IBM Corporation
Software: Storage Ceph
Software CPE: cpe:2.3:a:ibm_corporation:storage_ceph:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 180
Public exploits: 13
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Storage Ceph Storage Ceph is affected by 180 known vulnerabilities: 1 critical, 13 high, 101 medium, 65 low Critical High Medium Low

Vulnerabilities (180)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU92385 - Out-of-bounds write
CVE-2022-34038		 CWE-787 Medium
No
No
 7.1 20.06.2024 SB20240620104
SB2024082621
SB2024103137
and 3 more
#VU87328 - Improper Access Control
CVE-2024-1442		 CWE-284 Medium
No
No
 7.1 11.03.2024 SB2024031121
SB2024050135
SB2024081506
and 2 more
#VU85624 - Reachable Assertion
CVE-2024-0567		 CWE-617 Medium
No
No
 7.0z1 21.01.2024 SB2024012105
SB2024012106
SB2024012234
and 34 more
#VU85368 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-22195		 CWE-79 Medium
No
No
 7.1 15.01.2024 SB2024011508
SB2024011512
SB2024011513
and 60 more
#VU79521 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-35938		 CWE-59 Low
No
No
 7.0 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU78870 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2023-36665		 CWE-1321 Critical
No
No
 7.1 02.08.2023 SB2023080217
SB2023080241
SB2023081514
and 5 more
#VU74469 - Unprotected Alternate Channel
CVE-2023-28842		 CWE-420 Medium
No
No
 7.1 05.04.2023 SB2023040505
SB2023062140
SB2023080920
and 19 more
#VU69449 - NULL Pointer Dereference
CVE-2020-29652		 CWE-476 Medium
No
No
 7.1 21.11.2022 SB2020121742
SB2022112104
SB2023010607
and 7 more
#VU65267 - Improper Certificate Validation
CVE-2022-27536		 CWE-295 Medium
No
No
 7.1 13.07.2022 SB2022071328
SB2022080503
SB2023022244
and 7 more
#VU62361 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-43138		 CWE-94 Medium
No
No
 7.1 15.04.2022 SB2022041532
SB2022041533
SB2022062103
and 33 more
#VU61599 - Improper input validation
CVE-2022-21698		 CWE-20 Medium
No
No
 7.1 24.03.2022 SB2022021530
SB2022032413
SB2022040807
and 110 more
#VU58824 - Improper input validation
CVE-2021-44716		 CWE-20 Medium
No
No
 7.1 10.12.2021 SB2021121010
SB2021121011
SB2021121605
and 67 more
#VU57038 - Incorrect Default Permissions
CVE-2021-41103		 CWE-276 Low
No
No
 7.1 04.10.2021 SB2021100406
SB2021100503
SB2021110812
and 21 more
#VU54999 - Permissions, Privileges, and Access Controls
CVE-2021-32760		 CWE-264 Medium
No
No
 7.1 20.07.2021 SB2021072005
SB2021072227
SB2021072708
and 17 more
#VU54910 - Uncontrolled Recursion
CVE-2021-31525		 CWE-674 Medium
No
No
 7.1 15.07.2021 SB2021071514
SB2021052725
SB2021071515
and 39 more
#VU53399 - Security Features
CVE-2021-30465		 CWE-254 Low
No
No
 7.1 20.05.2021 SB2021052013
SB2021052014
SB2021052015
and 33 more
#VU52902 - Improper Validation of Array Index
CVE-2021-3121		 CWE-129 High
No
No
 7.1 06.05.2021 SB2021011120
SB2021050602
SB2021050603
and 34 more
#VU50274 - Resource exhaustion
CVE-2021-21285		 CWE-400 Medium
No
No
 7.1 02.02.2021 SB2021020305
SB2021020611
SB2021020923
and 9 more
#VU48795 - Improper Access Control
CVE-2020-15257		 CWE-284 Medium
Available
No
 7.1 01.12.2020 SB2020120606
SB2020120609
SB2020120715
and 10 more
#VU16546 - Improper input validation
CVE-2018-16875		 CWE-20 Low
No
No
 7.1 14.12.2018 SB2018121408
SB2018121704
SB2018121808
and 22 more


Showing elements 61 - 80 out of 180