Known vulnerabilities in Storage Ceph - page 8

Vendor: IBM Corporation
Software: Storage Ceph
Software CPE: cpe:2.3:a:ibm_corporation:storage_ceph:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 180
Public exploits: 13
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Storage Ceph Storage Ceph is affected by 180 known vulnerabilities: 1 critical, 13 high, 101 medium, 65 low Critical High Medium Low

Vulnerabilities (180)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 6.1z3 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU78470 - Missing Authorization
CVE-2023-2183		 CWE-862 Low
No
No
 6.1z3 20.07.2023 SB20230720110
SB20230720114
SB20230720115
and 9 more
#VU77164 - Exposure of sensitive information to an unauthorized actor
CVE-2023-32681		 CWE-200 Medium
Available
No
 6.1z3 12.06.2023 SB2023061224
SB2023061306
SB2023061514
and 114 more
#VU76062 - Incorrect Regular Expression
CVE-2022-21681		 CWE-185 Medium
No
No
 6.1 12.05.2023 SB2023051212
SB2022030934
SB2023061619
and 13 more
#VU76061 - Incorrect Regular Expression
CVE-2022-21680		 CWE-185 Medium
No
No
 6.1 12.05.2023 SB2023051212
SB2022030930
SB2023061619
and 11 more
#VU75360 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-1410		 CWE-79 Low
No
No
 6.1z3 19.04.2023 SB2023041950
SB2023041951
SB2023041952
and 11 more
#VU75359 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-0594		 CWE-79 Low
No
No
 6.1 19.04.2023 SB2023041949
SB2023041951
SB2023041952
and 6 more
#VU73831 - Exposure of sensitive information to an unauthorized actor
CVE-2023-27538		 CWE-200 Medium
No
No
 6.1z3 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 40 more
#VU72675 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-22462		 CWE-79 Low
No
No
 6.1 01.03.2023 SB2023030114
SB2023110239
SB2024020931
and 1 more
#VU72337 - Allocation of Resources Without Limits or Throttling
CVE-2023-23916		 CWE-770 Medium
No
No
 6.1 16.02.2023 SB2023021668
SB2023021670
SB2023021671
and 89 more
#VU72128 - Improper Verification of Cryptographic Signature
CVE-2022-31123		 CWE-347 Medium
No
No
 6.1 11.02.2023 SB2023021201
SB2023021202
SB2023021203
and 15 more
#VU70697 - Improper Authentication
CVE-2022-41912		 CWE-287 High
No
No
 6.1 04.01.2023 SB2023010431
SB2023010434
SB2023011035
and 7 more
#VU70456 - Use After Free
CVE-2022-43552		 CWE-416 Low
No
No
 6.1 21.12.2022 SB2022122102
SB2022122620
SB2022122621
and 66 more
#VU69484 - Improper input validation
CVE-2022-39306		 CWE-20 Medium
No
No
 6.1 22.11.2022 SB2022112220
SB2023021202
SB2023021203
and 12 more
#VU68557 - Authentication Bypass Using an Alternate Path or Channel
CVE-2022-35957		 CWE-288 Low
No
No
 6.1 20.10.2022 SB2022092614
SB2022102094
SB2023050969
and 16 more
#VU66063 - Resource exhaustion
CVE-2022-30630		 CWE-400 Medium
No
No
 6.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 79 more
#VU66062 - Resource exhaustion
CVE-2022-30631		 CWE-400 Medium
No
No
 6.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 100 more
#VU64399 - Cross-Site Request Forgery (CSRF)
CVE-2022-21703		 CWE-352 Medium
No
No
 6.1 15.06.2022 SB2022061621
SB2022062026
SB2022102094
and 14 more
#VU64397 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-21702		 CWE-79 Low
No
No
 6.1 15.06.2022 SB2022061621
SB2022062026
SB2022102094
and 14 more
#VU63173 - Permissions, Privileges, and Access Controls
CVE-2022-29526		 CWE-264 Low
No
No
 6.1 14.05.2022 SB2022051403
SB2022051404
SB2022062928
and 65 more


Showing elements 141 - 160 out of 180