Known vulnerabilities in Red Hat Ceph Storage - page 8

Vendor: Red Hat Inc.
Software: Red Hat Ceph Storage
Software CPE: cpe:2.3:a:red_hat:red_hat_ceph_storage:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 205
Public exploits: 11
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Ceph Storage Red Hat Ceph Storage is affected by 205 known vulnerabilities: 27 high, 112 medium, 66 low Critical High Medium Low

Vulnerabilities (205)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU76062 - Incorrect Regular Expression
CVE-2022-21681		 CWE-185 Medium
No
No
 6.1 12.05.2023 SB2023051212
SB2022030934
SB2023061619
and 13 more
#VU76061 - Incorrect Regular Expression
CVE-2022-21680		 CWE-185 Medium
No
No
 6.1 12.05.2023 SB2023051212
SB2022030930
SB2023061619
and 11 more
#VU72132 - Improper Authentication
CVE-2022-39229		 CWE-287 Low
No
No
 6.1 12.02.2023 SB2023021201
SB2023021202
SB2023021203
and 13 more
#VU72131 - Exposure of sensitive information to an unauthorized actor
CVE-2022-39201		 CWE-200 Medium
No
No
 6.1 12.02.2023 SB2023021201
SB2023021202
SB2023021203
and 12 more
#VU71566 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-39324		 CWE-451 Low
No
No
 6.1 26.01.2023 SB2023012631
SB2023032032
SB2023032033
and 12 more
#VU70697 - Improper Authentication
CVE-2022-41912		 CWE-287 High
No
No
 6.1 04.01.2023 SB2023010431
SB2023010434
SB2023011035
and 7 more
#VU69485 - Exposure of sensitive information to an unauthorized actor
CVE-2022-39307		 CWE-200 Medium
No
No
 6.1 22.11.2022 SB2022112220
SB2023021202
SB2023021203
and 12 more
#VU69484 - Improper input validation
CVE-2022-39306		 CWE-20 Medium
No
No
 6.1 22.11.2022 SB2022112220
SB2023021202
SB2023021203
and 12 more
#VU68390 - Resource exhaustion
CVE-2022-41715		 CWE-400 Medium
No
No
 6.1 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 113 more
#VU68389 - Improper input validation
CVE-2022-2880		 CWE-20 Medium
No
No
 6.1 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 94 more
#VU67396 - Improper input validation
CVE-2022-27664		 CWE-20 Medium
No
No
 6.1 15.09.2022 SB2022091520
SB2022091521
SB2022092144
and 127 more
#VU66070 - Resource exhaustion
CVE-2022-30633		 CWE-400 Medium
No
No
 6.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 72 more
#VU66068 - Resource exhaustion
CVE-2022-30635		 CWE-400 Medium
No
No
 6.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66067 - Resource exhaustion
CVE-2022-30632		 CWE-400 Medium
No
No
 6.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 79 more
#VU66064 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-1705		 CWE-444 Medium
No
No
 6.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU65354 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31097		 CWE-79 Low
No
No
 6.1 15.07.2022 SB2022071510
SB2022102094
SB2022102641
and 16 more
#VU64388 - Exposure of sensitive information to an unauthorized actor
CVE-2022-26148		 CWE-200 Low
No
No
 6.1 15.06.2022 SB2022061620
SB2023061619
SB2024022823
#VU64266 - Buffer overflow
CVE-2022-24675		 CWE-120 Low
No
No
 6.1 14.06.2022 SB2022041004
SB2022061422
SB2022061511
and 88 more
#VU63777 - Exposure of sensitive information to an unauthorized actor
CVE-2022-1650		 CWE-200 Medium
No
No
 6.1 30.05.2022 SB2022053001
SB2022053002
SB2022061422
and 16 more
#VU62463 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-24785		 CWE-22 Medium
No
No
 6.1 20.04.2022 SB2022042016
SB2022042017
SB2022060317
and 65 more


Showing elements 141 - 160 out of 205