cloud vulnerabilities and fixes

Recent CVEs affecting cloud, with upgrade or downgrade steps. 20 tracked.

cloud has 20 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 15. Most recent: 2026-01-09. Highest priority: CVE-2022-47875 (score 60/100).

• CVE-2026-20975 MEDIUM 5.5 UPGRADE Improper handling of insufficient permission in Samsung Cloud prior to version 5.6.11 allows local attackers t
• CVE-2024-36989 HIGH 7.1 UPGRADE UPGRADE In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312
• CVE-2024-36987 MEDIUM 4.3 UPGRADE UPGRADE In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312
• CVE-2024-36986 MEDIUM 6.3 UPGRADE UPGRADE In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312
• CVE-2024-36982 HIGH 7.5 UPGRADE UPGRADE In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312
• CVE-2024-23677 MEDIUM 4.3 UPGRADE UPGRADE In Splunk Enterprise versions below 9.0.8, the Splunk RapidDiag utility discloses server responses from extern
• CVE-2024-23676 MEDIUM 4.6 UPGRADE UPGRADE In Splunk versions below 9.0.8 and 9.1.3, the “mrollup” SPL command lets a low-privileged user view metrics on
• CVE-2024-23675 MEDIUM 6.5 UPGRADE UPGRADE In Splunk Enterprise versions below 9.0.8 and 9.1.3, Splunk app key value store (KV Store) improperly handles
• CVE-2024-20851 MEDIUM 4.4 UPGRADE Improper access control vulnerability in Samsung Data Store prior to version 5.3.00.4 allows local attackers t
• CVE-2023-46214 HIGH 8.0 UPGRADE UPGRADE In Splunk Enterprise versions below 9.0.7 and 9.1.2, Splunk Enterprise does not safely sanitize extensible sty
• CVE-2023-46213 MEDIUM 4.8 UPGRADE UPGRADE In Splunk Enterprise versions below 9.0.7 and 9.1.2, ineffective escaping in the “Show syntax Highlighted” fea
• CVE-2023-42578 MEDIUM 6.5 UPGRADE Improper handling of insufficient permissions or privileges vulnerability in Samsung Data Store prior to versi
• CVE-2023-32764 HIGH 7.8 MITIGATE DOWNGRADE Fabasoft Cloud Enterprise Client 23.3.0.130 allows a user to escalate their privileges to local administrator.
• CVE-2023-22951 HIGH 8.8 MITIGATE DOWNGRADE An issue was discovered in TigerGraph Enterprise Free Edition 3.x
• CVE-2023-22949 MEDIUM 4.9 MITIGATE DOWNGRADE An issue was discovered in TigerGraph Enterprise Free Edition 3.x
• CVE-2023-21448 MEDIUM 5.7 UPGRADE Path traversal vulnerability in Samsung Cloud prior to version 5.3.0.32 allows attacker to access specific png
• CVE-2023-21447 MEDIUM 4.0 UPGRADE Improper access control vulnerabilities in Samsung Cloud prior to version 5.3.0.32 allows local attackers to a
• CVE-2022-47875 HIGH 8.8 MITIGATE DOWNGRADE A Directory Traversal vulnerability in /be/erpc.php in Jedox GmbH Jedox 2020.2.5 allows remote authenticated u
• CVE-2022-47874 MEDIUM 6.5 MITIGATE DOWNGRADE Improper Access Control in /tc/rpc in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to view deta
• CVE-2022-33713 HIGH 7.5 UPGRADE Implicit Intent hijacking vulnerability in Samsung Cloud prior to version 5.2.0 allows attacker to get sensiti

FAQ

How do I fix cloud vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is cloud being exploited right now?

None of the tracked cloud CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which cloud CVE should I patch first?

CVE-2022-47875 currently ranks highest (60/100): A Directory Traversal vulnerability in /be/erpc.php in Jedox GmbH Jedox 2020.2.5 allows remote authenticated u.

RSS feed for cloud · ← Back to latest CVEs