Read the docs

Cohesity

Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

Cohesity records in CISA KEV

No Cohesity vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

5 records in Tranzman · all components

Priority MEDIUM 40

Multiple authenticated OS command injection vulnerabilities exist in the Cohesity (formerly Stone Ram) TranZman 4.0 Build 14614 through TZM_1757588060_SEP2025_FULL.depot web application API endpoints (including Scheduler…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.04061 Published 2026-03-03 No fix listed CWE-78
Priority LOW 34

An authenticated arbitrary file upload vulnerability in Cohesity TranZman Migration Appliance Release 4.0 Build 14614 allows attackers with Administrator privileges to execute arbitrary code via uploading a crafted patch…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00393 Published 2026-03-03 No fix listed CWE-345
Open these records in search →