Cohesity vulnerabilities

Products

• Tranzman 5
• Dataplatform 3
• Netbackup Flex Os 3

Newest

• cohesity netbackup administration console web interface Cohesity - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) CVE-2026-108925 6.1 MediumOctober 11, 2026
• cohesity netbackup flex os Sensitive File Disclosure via Relative Path Traversal in NetBackup Flex OS Shell CVE-2026-28199 4.8 MediumSeptember 18, 2026
• cohesity netbackup flex os Privilege Escalation via Cryptographic Signature Verification Bypass in NetBackup Flex OS Shell CVE-2026-28198 9.4 CriticalSeptember 18, 2026
• cohesity netbackup flex os Privilege Escalation via Argument Injection in NetBackup Flex OS Shell CVE-2026-28197 9.4 CriticalSeptember 18, 2026
• cohesity tranzman Multiple authenticated OS command injection vulnerabilities exist in the Cohesity (formerly Stone... CVE-2025-67840 7.2 HighMarch 3, 2026
• cohesity tranzman Cohesity TranZman Migration Appliance Release 4.0 Build 14614 was discovered to use a weak... CVE-2025-63912 7.5 HighMarch 3, 2026
• cohesity tranzman Cohesity TranZman Migration Appliance Release 4.0 Build 14614 was discovered to contain an... CVE-2025-63911 7.2 HighMarch 3, 2026
• cohesity tranzman An authenticated arbitrary file upload vulnerability in Cohesity TranZman Migration Appliance... CVE-2025-63910 7.2 HighMarch 3, 2026
• cohesity tranzman Incorrect access control in the component /opt/SRLtzm/bin/TapeDumper of Cohesity TranZman... CVE-2025-63909 7.2 HighMarch 3, 2026
• cohesity dataplatform Cohesity DataProtect 6.8.1 and 6.6.0d was discovered to have a incorrect access control... CVE-2023-33295 6.5 MediumJanuary 19, 2024
• cohesity linux agent A permission issue in the Cohesity Linux agent may allow privilege escalation in version 6.5.1b... CVE-2021-36795 7.8 HighAugust 6, 2021
• cohesity dataplatform A man-in-the-middle vulnerability in Cohesity DataPlatform support channel in version 6.3 up to 6... CVE-2021-28124 5.9 MediumApril 2, 2021
• cohesity dataplatform Undocumented Default Cryptographic Key Vulnerability in Cohesity DataPlatform version 6.3 prior 6... CVE-2021-28123 9.8 CriticalApril 2, 2021
• cohesity dataplatform A man-in-the-middle vulnerability related to vCenter access was found in Cohesity DataPlatform... CVE-2019-11242 8.1 HighJuly 12, 2019