Vulnerability Register

The Vulnerability Register reports security vulnerabilities affecting IONOS Cloud products and services. The information provided is part of an ongoing effort to help you manage security risks and protect your systems.

CVE ID	CVSS Base Score	Severity	Is Patch Available	Patch Deployed on and Status	Patch Responsibility
CVE-2025-20623	5.6	Medium	Yes	Planned	IONOS Cloud
CVE-2024-10220	8.1	High	Yes	Not Applicable	User
CVE-2024-9264	9.9	Critical	Not Applicable	Not Applicable	Not Applicable
CVE-2024-9486	9.8	Critical	Yes	October 15, 2024 and Done	IONOS Cloud
CVE-2024-47177	9.0	Critical	Yes	Not Applicable	Not Applicable
CVE-2024-31449	8.8	High	Yes	October 7, 2024 and Done	IONOS Cloud
CVE-2024-6387	8.1	Critical	Yes	July 2, 2024 and Done	IONOS Cloud
CVE-2024-4323	9.8	Critical	Not Applicable	Not Applicable	Not Applicable
CVE-2024-34010	8.2	High	Yes	June 11, 2024 and Done	Acronis
CVE-2024-3094	10	Critical	Not Applicable	Not Applicable	Not Applicable
CVE-2024-21626	8.6	High	Yes	February 5, 2024 and Done	IONOS Cloud
CVE-2023-23583	8.8	High	Yes	November 16, 2023 and Done	IONOS Cloud
CVE-2023-20569	4.7	Medium	Yes	October 13, 2023 and Done	IONOS Cloud
CVE-2023-45248	6.6	Medium	Yes	November 9, 2023 and Done	IONOS Cloud
CVE-2023-45247	7.1	High	Yes	November 9, 2023 and Done	IONOS Cloud
CVE-2022-40982	6.5	Medium	Yes	August 14, 2023 and Done	IONOS Cloud

Disclaimer: You will leave our site by clicking on external links. We do not have control over the content or availability of the linked websites, nor do we endorse or guarantee their accuracy, relevance, or completeness. We are not responsible for any issues from accessing or using these external websites, and we recommend reviewing the terms and privacy policies.

We highly recommend using the National Institute of Standards and Technology (NIST) public vulnerability database as an invaluable resource for your security efforts. The NIST public vulnerability database provides comprehensive information on known vulnerabilities, including detailed descriptions, severity ratings, and mitigation strategies.

For third-party dependant assets and services provided by IONOS Cloud, we recommend that you closely monitor the below external resources for the latest security-related information.

Product	Asset	Vulnerability Register
Images & Snapshots	Windows Images	Microsoft Security Update Guide
Images & Snapshots	Ubuntu Images	Ubuntu CVE Reports
Images & Snapshots	Debian Images	Debian Security Bug Tracker
Images & Snapshots	AlmaLinux Images	AlmaLinux Errata
Images & Snapshots	Rocky Linux Images	Rocky Linux Errata
Images & Snapshots	RHEL Images	Red Hat Security Advisories
Images & Snapshots	ClearOS Images	ClearCenter CVE Database
Images & Snapshots	Microsoft SQL Server Images	Microsoft Security Update Guide
Managed Kubernetes	Kubernetes resources	Kubernetes Official CVE Feed
Backup Service	Backup Agent	Acronis Advisory Database
PostgreSQL	PostgreSQL resources	PostgreSQL Security Information
MongoDB	MongoDB resources	MongoDB Alerts

To stay informed about the latest security vulnerabilities affecting various software, operating systems, and network components, regularly monitoring and referencing the above resources are crucial. By doing so, you can proactively assess and address potential security risks within your infrastructure.