Login Request a demo
CE
Product
Ceph
by Redhat · last CVE Nov 12, 2025
17
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities17In the news0Timeline
Severity mix
Critical 0High 7Medium 9Low 0
Severity
All severities17Critical0High7Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Ceph to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-3524
6.5
2%
May 17
A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14.2.21
Affected: before 14.2.21
CVE-2018-16846
6.5
2%
Jan 15
It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAPs holding bucket indices
Affected: before 13.2.4
CVE-2016-8626
6.5
2%
Jul 31
A flaw was found in Red Hat Ceph before 0.94.9-8
Affected: before 0.94.3.9-8
CVE-2017-16818
6.5
2%
Dec 20
RADOS Gateway in Ceph 12.1.0 through 12.2.1 allows remote authenticated users to cause a denial of service (assertion failure and application exit) by leveraging "full" (not…
Affected: 12.1.0 through 12.2.1
CVE-2016-5009
6.5
2%
Jul 12
The handle_command function in mon/Monitor.cc in Ceph allows remote authenticated users to cause a denial of service (segmentation fault and ceph monitor crash) via an (1) empty…
Affected: through 0.94.6
CVE-2018-14662
5.7
0%
Jan 15
It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt encryption keys used in ceph disk encryption
Affected: before 13.2.4
CVE-2020-27839
5.4
2%
May 26
A flaw was found in ceph-dashboard
Affected: before 14.2.17; 15.2.0 before 15.2.9
CVE-2021-3531
5.3
2%
May 18
A flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21
Affected: before 14.2.21
CVE-2020-25678
4.4
0%
Jan 8
A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in clear text
Affected: before 16.2.0
Showing 9