redhat ceph storage

Name: redhat ceph storage
Brand: redhat

productUS

cpe:2.3:a:redhat:ceph_storage:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

7critical13high23medium0low

updated 2026-10-25

vulnerabilities (45)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-44487US	high7.5OT critical	100.0% (100th)	KEV	no fix	2023-10-10	= 5.0
CVE-2023-48795US	medium5.9OT high	93.5% (100th)	Exploit	no fix	2023-12-18	= 6.0
CVE-2018-15727US	critical9.8	64.3% (99th)	Exploit	no fix	2018-08-29	= 3.0
CVE-2020-1712US	high7.8	0.46% (39th)	Exploit	no fix	2020-03-31	= 4.0
CVE-2022-26148US	critical9.8OT high	52.5% (99th)	—	no fix	2022-03-21	3 versions
CVE-2018-14649US	critical9.8	12.0% (96th)	—	no fix	2018-10-09	2 versions
CVE-2018-19039US	medium6.5	7.28% (94th)	—	no fix	2018-12-13	= 3.0
CVE-2019-10222US	high7.5	4.49% (91st)	—	no fix	2019-11-08	2 versions
CVE-2016-9579US	high7.5	4.34% (91st)	—	no fix	2018-08-01	2 versions
CVE-2018-10861US	high8.1	3.18% (88th)	—	no fix	2018-07-10	= 3
CVE-2021-4048US	critical9.1	2.76% (86th)	—	no fix	2021-12-08	4 versions
CVE-2021-3531US	medium5.3	2.43% (84th)	—	no fix	2021-05-18	= 4.0
CVE-2020-1699US	high7.5	2.14% (82nd)	—	no fix	2020-04-21	= 4.0
CVE-2018-16846US	medium6.5	2.14% (82nd)	—	no fix	2019-01-15	2 versions
CVE-2021-20288US	high7.2	2.13% (82nd)	—	no fix	2021-04-15	= 4.0
CVE-2018-1129US	medium6.5	1.90% (80th)	—	no fix	2018-07-10	2 versions
CVE-2019-14864US	medium6.5	1.87% (79th)	—	no fix	2020-01-02	= 3.0
CVE-2021-20236US	critical9.8	1.84% (79th)	—	no fix	2021-05-28	= 2.0
CVE-2023-0056US	medium6.5	1.83% (79th)	—	no fix	2023-03-23	= 5.0
CVE-2016-7031US	high7.5	1.75% (78th)	—	no fix	2016-10-03	≤ 1.3.2
CVE-2021-3509US	medium6.1	1.70% (77th)	—	no fix	2021-05-27	= 4.0
CVE-2020-10753US	medium6.5	1.63% (76th)	—	no fix	2020-06-26	2 versions
CVE-2020-1759US	medium6.8OT elevated	1.63% (76th)	—	no fix	2020-04-13	= 4.0
CVE-2021-3524US	medium6.5	1.60% (76th)	—	no fix	2021-05-17	= 4.0
CVE-2020-1760US	medium6.1	1.56% (75th)	—	no fix	2020-04-23	2 versions
CVE-2019-14859US	critical9.1	1.53% (75th)	—	no fix	2020-01-02	2 versions
CVE-2018-1128US	high7.5OT elevated	1.39% (72nd)	—	no fix	2018-07-10	= 3
CVE-2019-19337US	medium6.5	1.32% (71st)	—	no fix	2019-12-23	= 3.3
CVE-2020-25626US	medium6.1	1.30% (70th)	—	no fix	2020-09-30	= 2.0
CVE-2022-0670US	critical9.1OT elevated	1.28% (70th)	—	5.2	2022-07-25	< 5.2
CVE-2020-25660US	high8.8OT elevated	1.03% (64th)	—	no fix	2020-11-23	2 versions
CVE-2018-1059US	medium6.1	0.85% (58th)	—	no fix	2018-04-24	= 3.0
CVE-2019-14905US	medium5.6	0.71% (53rd)	—	no fix	2020-03-31	= 3.0
CVE-2021-3979US	medium6.5OT elevated	0.60% (48th)	—	no fix	2022-08-25	5 versions
CVE-2018-10875US	high7.8	0.59% (48th)	—	no fix	2018-07-13	2 versions
CVE-2022-3854US	medium6.5	0.57% (46th)	—	no fix	2023-03-06	3 versions
CVE-2025-14874US	—	0.56% (46th)	—	no fix	2025-12-18	= 8.0
CVE-2018-14662US	medium5.7	0.49% (41st)	—	no fix	2019-01-15	2 versions
CVE-2020-12458US	medium5.5OT elevated	0.49% (41st)	—	no fix	2020-04-29	2 versions
CVE-2020-10685US	medium5.5	0.36% (29th)	—	no fix	2020-05-11	2 versions
CVE-2025-13601US	—	0.32% (24th)	—	no fix	2025-11-26	= 8.0
CVE-2020-27781US	high7.1	0.31% (23rd)	—	no fix	2020-12-18	3 versions
CVE-2020-25678US	medium4.4OT elevated	0.27% (19th)	—	no fix	2021-01-08	= 4.0
CVE-2020-14365US	high7.1	0.23% (13th)	—	no fix	2020-09-23	2 versions
CVE-2020-25677US	medium5.5OT elevated	0.21% (11th)	—	no fix	2020-12-08	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation7 CVEs
CWE-287Improper Authentication6 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-312Cleartext Storage of Sensitive Information4 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-285Improper Authorization2 CVEs
CWE-294Authentication Bypass by Capture-replay2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE45 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan