Known vulnerabilities in Storage Ceph - page 9

Vendor: IBM Corporation
Software: Storage Ceph
Software CPE: cpe:2.3:a:ibm_corporation:storage_ceph:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 180
Public exploits: 13
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Storage Ceph Storage Ceph is affected by 180 known vulnerabilities: 1 critical, 13 high, 101 medium, 65 low Critical High Medium Low

Vulnerabilities (180)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75358 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-0507		 CWE-79 Low
No
No
 6.1 19.04.2023 SB2023041949
SB2023041951
SB2023041952
and 6 more
#VU72886 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-41721		 CWE-444 Medium
No
No
 6.1 06.03.2023 SB2023030655
SB2023030656
SB2023030657
and 39 more
#VU72132 - Improper Authentication
CVE-2022-39229		 CWE-287 Low
No
No
 6.1 12.02.2023 SB2023021201
SB2023021202
SB2023021203
and 13 more
#VU72131 - Exposure of sensitive information to an unauthorized actor
CVE-2022-39201		 CWE-200 Medium
No
No
 6.1 12.02.2023 SB2023021201
SB2023021202
SB2023021203
and 12 more
#VU69485 - Exposure of sensitive information to an unauthorized actor
CVE-2022-39307		 CWE-200 Medium
No
No
 6.1 22.11.2022 SB2022112220
SB2023021202
SB2023021203
and 12 more
#VU68390 - Resource exhaustion
CVE-2022-41715		 CWE-400 Medium
No
No
 6.1 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 113 more
#VU68389 - Improper input validation
CVE-2022-2880		 CWE-20 Medium
No
No
 6.1 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 94 more
#VU68387 - Resource Management Errors
CVE-2022-2879		 CWE-399 Medium
No
No
 6.1 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 78 more
#VU67396 - Improper input validation
CVE-2022-27664		 CWE-20 Medium
No
No
 6.1 15.09.2022 SB2022091520
SB2022091521
SB2022092144
and 127 more
#VU66122 - Use of Insufficiently Random Values
CVE-2022-30629		 CWE-330 Medium
No
No
 6.1 05.08.2022 SB2022080501
SB2022080503
SB2022081106
and 81 more
#VU66121 - Improper input validation
CVE-2022-32189		 CWE-20 Medium
No
No
 6.1 04.08.2022 SB2022080502
SB2022080503
SB2022080511
and 81 more
#VU66070 - Resource exhaustion
CVE-2022-30633		 CWE-400 Medium
No
No
 6.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 72 more
#VU66069 - Resource exhaustion
CVE-2022-28131		 CWE-400 Medium
No
No
 6.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 72 more
#VU66066 - Security Features
CVE-2022-32148		 CWE-254 Medium
No
No
 6.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU65354 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31097		 CWE-79 Low
No
No
 6.1 15.07.2022 SB2022071510
SB2022102094
SB2022102641
and 16 more
#VU65353 - Improper Authentication
CVE-2022-31107		 CWE-287 High
No
No
 6.1 15.07.2022 SB2022071510
SB2022072642
SB2022072643
and 21 more
#VU64269 - Integer overflow
CVE-2022-28327		 CWE-190 Low
No
No
 6.1 14.06.2022 SB2022041004
SB2022061422
SB2022061506
and 90 more
#VU64266 - Buffer overflow
CVE-2022-24675		 CWE-120 Low
No
No
 6.1 14.06.2022 SB2022041004
SB2022061422
SB2022061511
and 88 more
#VU63777 - Exposure of sensitive information to an unauthorized actor
CVE-2022-1650		 CWE-200 Medium
No
No
 6.1 30.05.2022 SB2022053001
SB2022053002
SB2022061422
and 16 more
#VU62463 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-24785		 CWE-22 Medium
No
No
 6.1 20.04.2022 SB2022042016
SB2022042017
SB2022060317
and 65 more


Showing elements 161 - 180 out of 180