Cohesity kayıtları
cohesity üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-295 Improper Certificate Validation2
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2
- CWE-276 Incorrect Default Permissions1
- CWE-1188 Initialization of a Resource with an Insecure Default1
- CWE-327 Use of a Broken or Risky Cryptographic Algorithm1
- CWE-345 Insufficient Verification of Data Authenticity1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2021-28123İstismar yok | Undocumented Default Cryptographic Key Vulnerability in Cohesity DataPlatform version 6.3 prior 6.3.1g, 6.4 up to 6.4.1c and 6.5.1 through 6cohesity · cohesity dataplatform · CWE-1188 | Kritik9,8 | — | %1,4 | 2 Nis 2021 |
32İzleyin | CVE-2019-11242İstismar yok | A man-in-the-middle vulnerability related to vCenter access was found in Cohesity DataPlatform version 5.x and 6.x prior to 6.1.1c.cohesity · dataplatform · CWE-295 | Yüksek8,1 | — | %0,5 | 12 Tem 2019 |
31İzleyin | CVE-2025-63909İstismar yok | Incorrect access control in the component /opt/SRLtzm/bin/TapeDumper of Cohesity TranZman Migration Appliance Release 4.0 Build 14614 allowscohesity · tranzman · CWE-269 | Yüksek7,8 | — | %0,3 | 3 Mar 2026 |
31İzleyin | CVE-2021-36795İstismar yok | A permission issue in the Cohesity Linux agent may allow privilege escalation in version 6.5.1b to 6.5.1d-hotfix10, 6.6.0a to 6.6.0b-hotfix1cohesity · linux agent · CWE-276 | Yüksek7,8 | — | %0,2 | 6 Ağu 2021 |
30İzleyin | CVE-2025-63912İstismar yok | Cohesity TranZman Migration Appliance Release 4.0 Build 14614 was discovered to use a weak cryptography algorithm for data encryption, allowcohesity · tranzman · CWE-327 | Yüksek7,5 | — | %0,1 | 3 Mar 2026 |
29İzleyin | CVE-2025-67840İstismar yok | Multiple authenticated OS command injection vulnerabilities exist in the Cohesity (formerly Stone Ram) TranZman 4.0 Build 14614 through TZM_cohesity · tranzman · CWE-78 | Yüksek7,2 | — | %3,8 | 3 Mar 2026 |
29İzleyin | CVE-2025-63911İstismar yok | Cohesity TranZman Migration Appliance Release 4.0 Build 14614 was discovered to contain an authenticated command injection vulnerability.cohesity · tranzman · CWE-78 | Yüksek7,2 | — | %2,4 | 3 Mar 2026 |
28İzleyin | CVE-2025-63910İstismar yok | An authenticated arbitrary file upload vulnerability in Cohesity TranZman Migration Appliance Release 4.0 Build 14614 allows attackers with cohesity · tranzman · CWE-345 | Yüksek7,2 | — | %0,3 | 3 Mar 2026 |
26İzleyin | CVE-2023-33295İstismar yok | Cohesity DataProtect prior to 6.8.1_u5 or 7.1 was discovered to have a incorrect access control vulnerability due to a lack of TLS Certificacohesity · cohesity dataplatform · CWE-295 | Orta6,5 | — | %0,2 | 19 Oca 2024 |
23İzleyin | CVE-2021-28124İstismar yok | A man-in-the-middle vulnerability in Cohesity DataPlatform support channel in version 6.3 up to 6.3.1g, 6.4 up to 6.4.1c and 6.5.1 through 6cohesity · cohesity dataplatform · CWE-306 | Orta5,9 | — | %1,0 | 2 Nis 2021 |
- CVE-2021-2812339İzleyin
Undocumented Default Cryptographic Key Vulnerability in Cohesity DataPlatform version 6.3 prior 6.3.1g, 6.4 up to 6.4.1c and 6.5.1 through 6
KritikCVSS 9,8İstismar yokEPSS %1cohesity · cohesity dataplatform2 Nis 2021
- CVE-2019-1124232İzleyin
A man-in-the-middle vulnerability related to vCenter access was found in Cohesity DataPlatform version 5.x and 6.x prior to 6.1.1c.
YüksekCVSS 8,1İstismar yokEPSS %0cohesity · dataplatform12 Tem 2019
- CVE-2025-6390931İzleyin
Incorrect access control in the component /opt/SRLtzm/bin/TapeDumper of Cohesity TranZman Migration Appliance Release 4.0 Build 14614 allows
YüksekCVSS 7,8İstismar yokEPSS %0cohesity · tranzman3 Mar 2026
- CVE-2021-3679531İzleyin
A permission issue in the Cohesity Linux agent may allow privilege escalation in version 6.5.1b to 6.5.1d-hotfix10, 6.6.0a to 6.6.0b-hotfix1
YüksekCVSS 7,8İstismar yokEPSS %0cohesity · linux agent6 Ağu 2021
- CVE-2025-6391230İzleyin
Cohesity TranZman Migration Appliance Release 4.0 Build 14614 was discovered to use a weak cryptography algorithm for data encryption, allow
YüksekCVSS 7,5İstismar yokEPSS %0cohesity · tranzman3 Mar 2026
- CVE-2025-6784029İzleyin
Multiple authenticated OS command injection vulnerabilities exist in the Cohesity (formerly Stone Ram) TranZman 4.0 Build 14614 through TZM_
YüksekCVSS 7,2İstismar yokEPSS %3cohesity · tranzman3 Mar 2026
- CVE-2025-6391129İzleyin
Cohesity TranZman Migration Appliance Release 4.0 Build 14614 was discovered to contain an authenticated command injection vulnerability.
YüksekCVSS 7,2İstismar yokEPSS %2cohesity · tranzman3 Mar 2026
- CVE-2025-6391028İzleyin
An authenticated arbitrary file upload vulnerability in Cohesity TranZman Migration Appliance Release 4.0 Build 14614 allows attackers with
YüksekCVSS 7,2İstismar yokEPSS %0cohesity · tranzman3 Mar 2026
- CVE-2023-3329526İzleyin
Cohesity DataProtect prior to 6.8.1_u5 or 7.1 was discovered to have a incorrect access control vulnerability due to a lack of TLS Certifica
OrtaCVSS 6,5İstismar yokEPSS %0cohesity · cohesity dataplatform19 Oca 2024
- CVE-2021-2812423İzleyin
A man-in-the-middle vulnerability in Cohesity DataPlatform support channel in version 6.3 up to 6.3.1g, 6.4 up to 6.4.1c and 6.5.1 through 6
OrtaCVSS 5,9İstismar yokEPSS %1cohesity · cohesity dataplatform2 Nis 2021