Browse CVEs

HIGH 7.2 CVE-2025-67840 Multiple authenticated OS command injection vulnerabilities exist in the Cohesity (formerly Stone Ram) TranZman 4.0 Build 14614 through TZM_175758806… Tranzman No fix yet Fix from $1,9502026-03-03 HIGH 7.8 CVE-2025-63909 Incorrect access control in the component /opt/SRLtzm/bin/TapeDumper of Cohesity TranZman Migration Appliance Release 4.0 Build 14614 allows attacker… Tranzman No fix yet Fix from $1,9502026-03-03 HIGH 7.5 CVE-2025-63912 Cohesity TranZman Migration Appliance Release 4.0 Build 14614 was discovered to use a weak cryptography algorithm for data encryption, allowing attac… Tranzman No fix yet Fix from $1,9502026-03-03 HIGH 7.2 CVE-2025-63910 An authenticated arbitrary file upload vulnerability in Cohesity TranZman Migration Appliance Release 4.0 Build 14614 allows attackers with Administr… Tranzman No fix yet Fix from $1,9502026-03-03 HIGH 7.2 CVE-2025-63911 Cohesity TranZman Migration Appliance Release 4.0 Build 14614 was discovered to contain an authenticated command injection vulnerability. Tranzman No fix yet Fix from $1,9502026-03-03 MEDIUM 6.5 CVE-2023-33295 Cohesity DataProtect prior to 6.8.1_u5 or 7.1 was discovered to have a incorrect access control vulnerability due to a lack of TLS Certificate Valida… Cohesity Dataplatform after 7.0.1 Fix from $1,6002024-01-19 HIGH 7.8 CVE-2021-36795 A permission issue in the Cohesity Linux agent may allow privilege escalation in version 6.5.1b to 6.5.1d-hotfix10, 6.6.0a to 6.6.0b-hotfix1. An unde… Linux Agent after 6.6.0b Fix from $1,9502021-08-06 CRITICAL 9.8 CVE-2021-28123 Undocumented Default Cryptographic Key Vulnerability in Cohesity DataPlatform version 6.3 prior 6.3.1g, 6.4 up to 6.4.1c and 6.5.1 through 6.5.1b. Th… Cohesity Dataplatform 6.3.1g / 6.4.1c+ Fix from $2,3002021-04-02 MEDIUM 5.9 CVE-2021-28124 A man-in-the-middle vulnerability in Cohesity DataPlatform support channel in version 6.3 up to 6.3.1g, 6.4 up to 6.4.1c and 6.5.1 through 6.5.1b. Mi… Cohesity Dataplatform after 6.5.1b Fix from $1,6002021-04-02 HIGH 8.1 CVE-2019-11242 A man-in-the-middle vulnerability related to vCenter access was found in Cohesity DataPlatform version 5.x and 6.x prior to 6.1.1c. Cohesity clusters… Dataplatform 6.1.1c+ Fix from $1,9502019-07-12