Product by Red Hat
Red Hat Ceph
34 known vulnerabilities in Red Hat Ceph (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
34
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2019-10222 | Ceph: Improper Handling of Exceptional Conditions | 7.5 | |
| High | CVE-2018-10861 | Red Hat Ceph: Improper Authorization | 8.1 | |
| High | CVE-2016-9579 | Red Hat Ceph: Improper Input Validation | 6.5 | |
| High | CVE-2018-7262 | Red hat Ceph: Denial of Service | 7.5 | |
| High | CVE-2020-1699 | The Ceph Project Ceph: Exposure of Sensitive Information to an Unauthorized Actor | 7.5 | |
| Medium | CVE-2016-5009 | Red hat Ceph: Denial of Service | 6.5 | |
| High | CVE-2021-20288 | Ceph: Improper Authentication | 7.2 | |
| Medium | CVE-2020-1700 | Ceph: Uncontrolled Resource Consumption | 6.5 | |
| Medium | CVE-2017-16818 | Red hat Ceph: Denial of Service | 6.5 | |
| Medium | CVE-2016-8626 | Red Hat Ceph: NULL Pointer Dereference | 6.5 | |
| Medium | CVE-2018-16846 | Ceph: Allocation of Resources Without Limits or Throttling | 6.5 | |
| High | CVE-2016-7031 | Ceph: security vulnerability | 7.5 | |
| Critical | CVE-2022-0670 | Ceph: Incorrect Authorization | 9.1 | |
| Medium | CVE-2020-27839 | Ceph-dashboard: Insufficiently Protected Credentials | 5.4 | |
| Medium | CVE-2018-1129 | Red Hat Ceph: Improper Access Control | 6.5 | |
| Medium | CVE-2021-3531 | Ceph: Improper Input Validation | 5.3 | |
| High | CVE-2018-1128 | Red Hat Ceph: Authentication Bypass by Capture-replay | 7.5 | |
| Medium | CVE-2021-3524 | Ceph: Improper Input Validation | 6.5 | |
| Medium | CVE-2020-1759 | The Ceph Project Ceph: Reusing a Nonce, Key Pair in Encryption | 6.4 | |
| High | CVE-2020-25660 | Ceph: Authentication Bypass by Capture-replay | 8.8 | |
| Medium | CVE-2020-1760 | Ceph: Cross-site Scripting | 5.8 | |
| Medium | CVE-2020-10753 | Red Hat Ceph Storage: HTTP Request/Response Splitting | 5.4 | |
| High | CVE-2025-30156 | Ceph: AES-CBC misuse in CephX and RADOSGW enables authentication bypass and credential forgery | 8.9 | |
| High | CVE-2024-47866 | RGW DoS attack with empty HTTP header in S3 object copy | 7.5 | |
| Medium | CVE-2022-3854 | Ceph: Improper Handling of URL Encoding (Hex Encoding) | 6.5 |