Known vulnerabilities in Storage Ceph - page 7

Vendor: IBM Corporation
Software: Storage Ceph
Software CPE: cpe:2.3:a:ibm_corporation:storage_ceph:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 180
Public exploits: 13
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Storage Ceph Storage Ceph is affected by 180 known vulnerabilities: 1 critical, 13 high, 101 medium, 65 low Critical High Medium Low

Vulnerabilities (180)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85833 - Resource exhaustion
CVE-2023-46159		 CWE-400 Low
No
No
 6.1z2 26.01.2024 SB2024012623
SB2024020929
SB2024110890
and 4 more
#VU81865 - Heap-based Buffer Overflow
CVE-2023-38545		 CWE-122 High
Available
No
 6.1z3 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 99 more
#VU81453 - Use After Free
CVE-2023-4813		 CWE-416 Medium
No
No
 6.1z3 04.10.2023 SB2023100435
SB2023100579
SB2023100581
and 91 more
#VU81447 - Use After Free
CVE-2023-4806		 CWE-416 Medium
No
No
 6.1z3 03.10.2023 SB2023100363
SB2023100402
SB2023100418
and 97 more
#VU81097 - Out-of-bounds read
CVE-2023-4527		 CWE-125 Medium
No
No
 6.1z2 25.09.2023 SB2023092525
SB2023100345
SB2023100402
and 79 more
#VU79586 - Access of Uninitialized Pointer
CVE-2023-36054		 CWE-824 Medium
No
No
 6.1z3 16.08.2023 SB2023081621
SB2023081623
SB2023081624
and 51 more
#VU79344 - Double Free
CVE-2023-39975		 CWE-415 Medium
No
No
 6.1z3 10.08.2023 SB2023081014
SB20230821173
SB2023110766
and 26 more
#VU77623 - Improper Synchronization
CVE-2023-2801		 CWE-662 Medium
No
No
 6.1z3 22.06.2023 SB2023062244
SB20230720114
SB20230720115
and 8 more
#VU76238 - Expected Behavior Violation
CVE-2023-28322		 CWE-440 Medium
No
No
 6.1z2 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 88 more
#VU75141 - Memory corruption
CVE-2023-29491		 CWE-119 Low
No
No
 6.1z3 14.04.2023 SB2023041454
SB2023052328
SB2023052346
and 132 more
#VU73829 - State Issues
CVE-2023-27536		 CWE-371 Medium
No
No
 6.1z3 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 80 more
#VU73828 - State Issues
CVE-2023-27535		 CWE-371 Low
No
No
 6.1 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 84 more
#VU73827 - Improper input validation
CVE-2023-27534		 CWE-20 Low
No
No
 6.1z3 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 45 more
#VU72130 - Exposure of sensitive information to an unauthorized actor
CVE-2022-31130		 CWE-200 Medium
No
No
 6.1 12.02.2023 SB2023021201
SB2023021202
SB2023021203
and 11 more
#VU71566 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-39324		 CWE-451 Low
No
No
 6.1 26.01.2023 SB2023012631
SB2023032032
SB2023032033
and 12 more
#VU71379 - Incorrect Regular Expression
CVE-2022-40897		 CWE-185 Medium
No
No
 5.3z2 20.01.2023 SB2023012008
SB2023012015
SB2023012016
and 99 more
#VU66064 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-1705		 CWE-444 Medium
No
No
 6.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU16956 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20676		 CWE-79 Low
No
No
 6.1z2 13.01.2019 SB2018121404
SB2019101009
SB2020093090
and 18 more
#VU16542 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20677		 CWE-79 Low
No
No
 6.1z2 14.12.2018 SB2018121404
SB2019101009
SB2020093090
and 18 more
#VU13903 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14041		 CWE-79 Low
No
No
 6.1z2 18.07.2018 SB2018071803
SB2019031501
SB2023013124
and 8 more


Showing elements 121 - 140 out of 180