Known vulnerabilities in Red Hat Ceph Storage - page 10

Vendor: Red Hat Inc.
Software: Red Hat Ceph Storage
Software CPE: cpe:2.3:a:red_hat:red_hat_ceph_storage:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 205
Public exploits: 11
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Ceph Storage Red Hat Ceph Storage is affected by 205 known vulnerabilities: 27 high, 112 medium, 66 low Critical High Medium Low

Vulnerabilities (205)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114318 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2021-3524		 CWE-113 Low
No
No
 4.3, 5.1 21.08.2025 SB2021051735
SB2025082110
SB2021051423
and 7 more
#VU73108 - Covert Timing Channel
CVE-2020-25658		 CWE-385 Low
No
No
 4.3 07.03.2023 SB2020111232
SB2023030749
SB2022111045
and 7 more
#VU66551 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2021-3979		 CWE-327 Low
No
No
 5.1, 4.3 16.08.2022 SB2022081730
SB2022081731
SB2022122122
and 6 more
#VU66440 - Permissions, Privileges, and Access Controls
CVE-2022-0670		 CWE-264 Medium
No
No
 - 12.08.2022 SB2022081213
SB2022081215
SB2022081223
and 10 more
#VU64402 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21673		 CWE-200 Low
No
No
 - 15.06.2022 SB2022061623
SB2022062026
SB2022081215
and 12 more
#VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-1292		 CWE-78 Medium
Available
No
 - 03.05.2022 SB2022050315
SB2022050436
SB2022050503
and 141 more
#VU56685 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2021-40528		 CWE-327 Medium
No
No
 - 17.09.2021 SB2021091710
SB2021091711
SB2021091629
and 44 more
#VU53692 - Improper Authentication
CVE-2021-20288		 CWE-287 Medium
No
No
 - 01.06.2021 SB2021060109
SB2021060110
SB2022041926
and 5 more
#VU53311 - Improper input validation
CVE-2021-3531		 CWE-20 Medium
No
No
 5.1 17.05.2021 SB2021051713
SB2021051423
SB2021051424
and 4 more
#VU48896 - NULL Pointer Dereference
CVE-2020-1971		 CWE-476 Medium
Available
No
 - 08.12.2020 SB2020120852
SB2020120903
SB2020120905
and 91 more
#VU48684 - Authentication Bypass Using an Alternate Path or Channel
CVE-2020-25660		 CWE-288 Medium
No
No
 4.1 23.11.2020 SB2020112701
SB2020112704
SB2020120405
and 6 more
#VU46295 - NULL Pointer Dereference
CVE-2020-24659		 CWE-476 Medium
No
No
 - 04.09.2020 SB2020090415
SB2020090416
SB2020090604
and 11 more
#VU31882 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1760		 CWE-79 Medium
No
No
 4.1 26.07.2020 SB2020042381
SB2020042382
SB2020041035
and 6 more
#VU48628 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2020-10753		 CWE-74 Medium
No
No
 3.3, 4.1 26.06.2020 SB2020062624
SB2020112420
SB2020112704
and 7 more
#VU28581 - Server-Side Request Forgery (SSRF)
CVE-2020-13379		 CWE-918 Medium
Available
No
 - 04.06.2020 SB2020060421
SB2020062606
SB2020062610
and 10 more
#VU20465 - Resource Management Errors
CVE-2019-10222		 CWE-399 Medium
No
No
 - 29.08.2019 SB2019082901
SB2019082902
SB2019082904
and 6 more
#VU17318 - Missing release of memory after effective lifetime
CVE-2018-16889		 CWE-401 Low
No
No
 - 30.01.2019 SB2019013011
SB2019030809
SB2019082111
and 2 more
#VU17098 - Exposure of sensitive information to an unauthorized actor
CVE-2018-14662		 CWE-200 Low
No
No
 - 21.01.2019 SB2019012103
SB2019030809
SB2019042801
and 4 more
#VU17097 - Memory corruption
CVE-2018-16846		 CWE-119 Low
No
No
 - 21.01.2019 SB2019012103
SB2019030809
SB2019042801
and 3 more
#VU15923 - Exposure of sensitive information to an unauthorized actor
CVE-2018-19039		 CWE-200 Low
No
No
 - 15.11.2018 SB2018111603
SB2018111604
SB2019041109
and 2 more


Showing elements 181 - 200 out of 205