Known vulnerabilities in Ceph - page 2

Software: Ceph
Software CPE: cpe:2.3:a:red_hat:ceph:*:*:*:*:*:*:*:*
Total vulnerabilities: 45
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Ceph Ceph is affected by 45 known vulnerabilities: 4 high, 22 medium, 19 low Critical High Medium Low

Vulnerabilities (45)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114318 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2021-3524
CWE-113 Low
No
No
14.2.21 21.08.2025 SB2021051735
SB2025082110
SB2021051423
and 7 more
#VU77476 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4231
CWE-79 Low
No
No
17.2.6-70.el9cp 16.06.2023 SB2022052637
SB2023061625
SB2023062315
and 3 more
#VU74055 - Improper input validation
CVE-2022-3854
CWE-20 Medium
No
No
16.2.11 27.03.2023 SB2023022857
SB2023032745
SB2023032746
and 3 more
#VU72630 - Incorrect Default Permissions
CVE-2022-3650
CWE-276 Low
No
No
16.2.11, 16.2.10-138.el8cp, 16.2.10-138.el9cp 28.02.2023 SB2023022857
SB2023022873
SB2023030907
and 10 more
#VU66440 - Permissions, Privileges, and Access Controls
CVE-2022-0670
CWE-264 Medium
No
No
17.2.2, 16.2.8-84.el9cp 12.08.2022 SB2022081213
SB2022081215
SB2022081223
and 10 more
#VU65835 - Incorrect Regular Expression
CVE-2022-31129
CWE-185 Medium
No
No
17.2.6-70.el9cp 27.07.2022 SB2022072729
SB2022072901
SB2022081048
and 102 more
#VU62463 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-24785
CWE-22 Medium
No
No
16.2.10-94.el8cp, 16.2.10-94.el9cp 20.04.2022 SB2022042016
SB2022042017
SB2022060317
and 65 more
#VU53693 - Insufficiently Protected Credentials
CVE-2020-27781
CWE-522 Low
No
No
14.2.16, 15.2.8, 16.2.0 01.06.2021 SB2020121829
SB2021060110
SB2020122501
and 1 more
#VU53692 - Improper Authentication
CVE-2021-20288
CWE-287 Medium
No
No
14.2.20, 15.2.11, 16.2.1, 12.2.12-141.el7cp 01.06.2021 SB2021060109
SB2021060110
SB2022041926
and 5 more
#VU53682 - Cleartext Storage of Sensitive Information
CVE-2020-25678
CWE-312 Low
No
No
15.2.9 31.05.2021 SB2021010813
SB2021060110
SB2021040738
#VU53311 - Improper input validation
CVE-2021-3531
CWE-20 Medium
No
No
14.2.21, 15.2.12, 16.2.4 17.05.2021 SB2021051713
SB2021051423
SB2021051424
and 4 more
#VU53310 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3509
CWE-79 Low
No
No
14.2.21, 15.2.12, 16.2.4 17.05.2021 SB2021051712
SB2021051423
SB2021060252
and 1 more
#VU48684 - Authentication Bypass Using an Alternate Path or Channel
CVE-2020-25660
CWE-288 Medium
No
No
14.2.14, 15.2.6, 14.2.8-115.el7cp, 14.2.8-115.el8cp 23.11.2020 SB2020112701
SB2020112704
SB2020120405
and 6 more
#VU31882 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1760
CWE-79 Medium
No
No
13.2.9, 14.2.9, 15.1.1, 15.2.1 26.07.2020 SB2020042381
SB2020042382
SB2020041035
and 6 more
#VU28173 - Improper Authorization
CVE-2020-10736
CWE-285 Medium
No
No
15.2.2 21.05.2020 SB2020052138
SB2020112419
SB2021012849
#VU26150 - Resource Management Errors
CVE-2020-1700
CWE-399 Medium
No
No
15.1.1 18.03.2020 SB2020020721
SB2020031804
SB2020020806
and 1 more
#VU20465 - Resource Management Errors
CVE-2019-10222
CWE-399 Medium
No
No
12.2.12, 13.2.6 29.08.2019 SB2019082901
SB2019082902
SB2019082904
and 6 more
#VU17318 - Missing release of memory after effective lifetime
CVE-2018-16889
CWE-401 Low
No
No
- 30.01.2019 SB2019013011
SB2019030809
SB2019082111
and 2 more
#VU17098 - Exposure of sensitive information to an unauthorized actor
CVE-2018-14662
CWE-200 Low
No
No
13.2.4 21.01.2019 SB2019012103
SB2019030809
SB2019042801
and 4 more
#VU17097 - Memory corruption
CVE-2018-16846
CWE-119 Low
No
No
13.2.4 21.01.2019 SB2019012103
SB2019030809
SB2019042801
and 3 more


Showing elements 21 - 40 out of 45