ST
Product
StorageGRID
On CISA KEVExploited in the wildRansomware-linked
74
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 29Medium 24Low 12
Watch
Add StorageGRID to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-3427 In wildKEV | 9.8 | Apr 21 | Oracle Java SE and JRockit Unspecified Vulnerability Affected: through 9.0.4 |
| CVE-2021-40438 RansomwareIn wildKEV | 9.0 | Sep 16 | mod_proxy SSRF Affected: All versions, or not specified |
| CVE-2025-25292 | 9.8 | Mar 12 | ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby Affected: All versions, or not specified |
| CVE-2025-25291 | 9.8 | Mar 12 | ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby Affected: All versions, or not specified |
| CVE-2022-37434 | 9.8 | Aug 5 | zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field Affected: All versions, or not specified |
| CVE-2021-39275 | 9.8 | Sep 16 | ap_escape_quotes() may write beyond the end of a buffer when given malicious input Affected: All versions, or not specified |
| CVE-2018-1312 | 9.8 | Mar 26 | In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not correctly generated using a pseudo-random… Affected: All versions, or not specified |
| CVE-2017-3167 | 9.8 | Jun 20 | In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by third-party modules outside of the authentication phase may lead to… Affected: All versions, or not specified |
| CVE-2022-23806 | 9.1 | Feb 11 | Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element Affected: All versions, or not specified |
Showing 9