ST
Product
StorageGRID
On CISA KEVExploited in the wildRansomware-linked
74
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 29Medium 24Low 12
Watch
Add StorageGRID to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-21988 | 5.3 | Jun 14 | StorageGRID (formerly StorageGRID Webscale) versions prior to 11.7.0.9 and 11.8.0.5 are susceptible to disclosure of sensitive information via complex MiTM attacks due to a… Affected: before 11.7.0.9; 11.8.0 before 11.8.0.5 |
| CVE-2020-2830 | 5.3 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency) Affected: 9.0.0 through 9.0.4 |
| CVE-2020-2781 | 5.3 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE) Affected: 9.0.0 through 9.0.4 |
| CVE-2018-1283 | 5.3 | Mar 26 | In Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to CGI applications (SessionEnv on, not the default), a remote user may influence their… Affected: All versions, or not specified |
| CVE-2022-23232 | 4.9 | Mar 4 | StorageGRID (formerly StorageGRID Webscale) versions prior to 11.6.0 are susceptible to a vulnerability which when successfully exploited could allow disabled, expired, or locked… Affected: before 11.6.0 |
| CVE-2020-14556 | 4.8 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: 9.0.0 through 9.0.4 |
| CVE-2020-2800 | 4.8 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server) Affected: 9.0.0 through 9.0.4 |
| CVE-2020-2767 | 4.8 | Apr 15 | Vulnerability in the Java SE product of Oracle Java SE (component: JSSE) Affected: 9.0.0 through 9.0.4 |
| CVE-2018-2581 | 4.7 | Jan 18 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX) Affected: through 9.0.4 |
| CVE-2021-27006 | 4.4 | Dec 23 | StorageGRID (formerly StorageGRID Webscale) versions 11.5 prior to 11.5.0.5 are susceptible to a vulnerability which may allow an administrative user to escalate their privileges… Affected: 11.5.0 before 11.5.0.5 |
| CVE-2026-22051 | 4.3 | Apr 20 | StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are susceptible to a Information Disclosure vulnerability Affected: before 11.9.0.13; 12.0 before 12.0.0.6 |
| CVE-2024-21994 | 4.3 | Nov 8 | StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9 are susceptible to a Denial of Service (DoS) vulnerability Affected: before 11.9.0 |
| CVE-2020-16166 | 3.7 | Jul 30 | The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG, aka… Affected: through 9.0.4 |
| CVE-2020-14581 | 3.7 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D) Affected: 9.0.0 through 9.0.4 |
| CVE-2020-14579 | 3.7 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: 9.0.0 through 9.0.4 |
| CVE-2020-14578 | 3.7 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: 9.0.0 through 9.0.4 |
| CVE-2020-14577 | 3.7 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE) Affected: 9.0.0 through 9.0.4 |
| CVE-2020-2778 | 3.7 | Apr 15 | Vulnerability in the Java SE product of Oracle Java SE (component: JSSE) Affected: 9.0.0 through 9.0.4 |
| CVE-2020-2773 | 3.7 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security) Affected: 9.0.0 through 9.0.4 |
| CVE-2020-2757 | 3.7 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization) Affected: 9.0.0 through 9.0.4 |
| CVE-2020-2756 | 3.7 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization) Affected: 9.0.0 through 9.0.4 |
| CVE-2020-2755 | 3.7 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting) Affected: 9.0.0 through 9.0.4 |
| CVE-2020-2754 | 3.7 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting) Affected: 9.0.0 through 9.0.4 |
| CVE-2026-22056 | 2.3 | Aug 28 | CVE-2026-22056 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale) Affected: 11.5 |