Vulnerability Register

The Vulnerability Register reports security vulnerabilities affecting IONOS Cloud products and services. The information provided is part of an ongoing effort to help you manage security risks and protect your systems.

CVE ID	CVSS Base Score	Severity	Is Patch Available	Patch Deployed on and Status	Patch Responsibility
CVE-2024-6387	8.1	Critical	Yes	July 2, 2024 and In Progress	IONOS Cloud
CVE-2024-4323	9.8	Critical	NA	NA	NA
CVE-2024-34010	8.2	High	Yes	May 6, 2024 and In Progress	Acronis
CVE-2024-3094	10	Critical	NA	NA	NA
CVE-2024-21626	8.6	High	Yes	February 5, 2024	IONOS Cloud
CVE-2023-23583	8.8	High	Yes	November 16, 2023	IONOS Cloud
CVE-2023-34048	9.8	Critical	Yes	November 6, 2023	IONOS Cloud
CVE-2023-20569	4.7	Medium	Yes	October 13, 2023 and Ongoing	IONOS Cloud
CVE-2023-45248	6.6	Medium	No		IONOS Cloud
CVE-2023-45247	7.1	High	No		IONOS Cloud
CVE-2022-40982	6.5	Medium	Yes	August 14, 2023	IONOS Cloud

Disclaimer: You will leave our site by clicking on external links. We do not have control over the content or availability of the linked websites, nor do we endorse or guarantee their accuracy, relevance, or completeness. We are not responsible for any issues from accessing or using these external websites, and we recommend reviewing the terms and privacy policies.

We highly recommend using the NIST (National Institute of Standards and Technology) public vulnerability database as an invaluable resource for your security efforts. The NIST public vulnerability database provides comprehensive information on known vulnerabilities, including detailed descriptions, severity ratings, and mitigation strategies.

For third-party dependant assets and services provided by IONOS Cloud, we recommend that you closely monitor the below external resources for the latest security-related information.

Compute Engine

Product	Asset	Vulnerability Register
Images & Snapshots	Windows Images	Microsoft Security Update Guide
Images & Snapshots	Ubuntu Images	Ubuntu CVE Reports
Images & Snapshots	Debian Images	Debian Security Bug Tracker
Images & Snapshots	AlmaLinux Images	AlmaLinux Errata
Images & Snapshots	Rocky Linux Images	Rocky Linux Errata
Images & Snapshots	RHEL Images	Red Hat Security Advisories
Images & Snapshots	ClearOS Images	ClearCenter CVE Database
Images & Snapshots	Microsoft SQL Server Images	Microsoft Security Update Guide

Managed Services

Product	Asset	Vulnerability Register
Managed Kubernetes	Kubernetes resources	Kubernetes Official CVE Feed
Backup Service	Backup Agent	Acronis Advisory Database
Database as a Service	PostgreSQL resources	PostgreSQL Security Information
Database as a Service	MongoDB resources	MongoDB Alerts

To stay informed about the latest security vulnerabilities affecting various software, operating systems, and network components, regularly monitoring and referencing the above resources are crucial. By doing so, you can proactively assess and address potential security risks within your infrastructure.