Vendors / Cohesity Records 14 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3 CVSS 9.0–10.0
CVSS high 7 CVSS 7.0–8.9
Exploited now Cohesity records in CISA KEV No Cohesity vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 45
Undocumented Default Cryptographic Key Vulnerability in Cohesity DataPlatform version 6.3 prior 6.3.1g, 6.4 up to 6.4.1c and 6.5.1 through 6.5.1b.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01479 · Published 2021-04-02 · No fix listed CWE-1188
Priority LOW 29
Cohesity DataProtect prior to 6.8.1_u5 or 7.1 was discovered to have a incorrect access control vulnerability due to a lack of TLS Certificate Validation.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00277 · Published 2024-01-19 · No fix listed CWE-295
Priority LOW 29
A man-in-the-middle vulnerability in Cohesity DataPlatform support channel in version 6.3 up to 6.3.1g, 6.4 up to 6.4.1c and 6.5.1 through 6.5.1b.
CVSS 3.1 MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01052 · Published 2021-04-02 · No fix listed CWE-306
Open these records in search → All records by CVSS severity
Critical3 High7 Medium4 Low0 No CVSS0