n/a Ceph

Name: n/a Ceph
Brand: n/a

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical4high5medium0low

updated 2026-10-28

vulnerabilities (10)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-3531US	medium5.3	2.18% (82nd)	—	no fix	2021-05-18	≤ ceph 14.2.21
CVE-2021-20288US	high7.2	2.13% (82nd)	—	no fix	2021-04-15	≤ ceph 14.2.20
CVE-2021-3524US	medium6.5	1.60% (76th)	—	no fix	2021-05-17	≤ ceph 14.2.21
CVE-2022-0670US	critical9.1OT elevated	1.28% (70th)	—	no fix	2022-07-25	≤ Ceph v 17.2.2
CVE-2020-25660US	high8.8OT elevated	1.03% (64th)	—	no fix	2020-11-23	≤ All ceph versions before 15.2.6 and before 14.2.14
CVE-2022-3854US	medium6.5	0.57% (47th)	—	no fix	2023-03-06	≤ As shipped with Red Hat Ceph 3, 4, and 5.
CVE-2021-3979US	medium6.5OT elevated	0.57% (47th)	—	no fix	2022-08-25	≤ Not-Known
CVE-2022-3650US	high7.8	0.33% (26th)	—	no fix	2023-01-17	≤ unknown
CVE-2020-27781US	high7.1	0.29% (22nd)	—	no fix	2020-12-18	≤ Ceph 16.2.0
CVE-2020-25678US	medium4.4OT elevated	0.26% (17th)	—	no fix	2021-01-08	≤ ceph versions prior to 16.y.z

The flaw types (CWEs) most of these CVEs share.

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.