Read the docs

backstage

Records663All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical58CVSS 9.0–10.0
CVSS high242CVSS 7.0–8.9

Exploited now

backstage records in CISA KEV
TI-2026-33119 TanStack Unspecified Vulnerability Priority CRITICAL 100KEV 2026-05-27TI-2018-10499 Linux Kernel Integer Overflow Vulnerability Priority CRITICAL 93KEV 2026-01-26

Components

Products in the NVD configurations · select one to filter the records
Yocto 114 records MEDIUM Backstage 53 records MEDIUM Nats-server 36 records HIGH Pytorch 31 records HIGH Everest 29 records HIGH Harbor 24 records MEDIUM Containerd 22 records HIGH Magma 22 records MEDIUM

Records

8 records in Ceph · all components

TI-2022-00585 CVE-2022-0670 · GHSA-g5mr-95rv-q4hc

Incorrect authorization in Ceph

Priority MEDIUM 42

A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0128 Published 2022-07-25 Partial fix CWE-863
TI-2020-01646 CVE-2020-1699 · GHSA-c7h3-g28j-x6jq

Information disclosure in ceph

Priority LOW 37

A path traversal flaw was found in the Ceph dashboard implemented in upstream versions v14.2.5, v14.2.6, v15.0.0 of Ceph storage and has been fixed in versions 14.2.7 and 15.1.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02144 Published 2020-04-21 No fix listed CWE-200
TI-2021-03578 CVE-2021-20288 · GHSA-39jx-6759-44c6

Improper authentication in ceph

Priority LOW 36

An authentication flaw was found in ceph in versions before 14.2.20.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0211 Published 2021-04-15 Partial fix CWE-287
TI-2020-08635 CVE-2020-10736 · GHSA-7hf6-hcxg-35gw

Improper authorization in [UNKNOWN] ceph

Priority LOW 36

An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the ceph-mon and ceph-mgr daemons do not properly restrict access, resulting in gaining access to unauthorized resources.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00646 Published 2020-06-22 Fixed in 15.2.2 CWE-285
TI-2020-01702 CVE-2020-1759 · GHSA-hcpq-vw4g-3vmh

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container…

Priority LOW 33

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attack…

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.01625 Published 2020-04-13 Partial fix CWE-323
TI-2020-08650 CVE-2020-10753 · GHSA-cggp-94xr-prm6

HTTP response splitting in Red Hat Ceph Storage

Priority LOW 32

A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway).

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0145 Published 2020-06-26 Partial fix CWE-113
TI-2020-01703 CVE-2020-1760 · GHSA-gj74-48rr-85f7

Cross-site scripting in [UNKNOWN] ceph

Priority LOW 30

A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01557 Published 2020-04-23 Partial fix CWE-79
Open these records in search →