Cohesity Tranzman — known CVE vulnerabilities

Every CVE whose affected-product data names Cohesity Tranzman, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2025-63912 — CVSS 7.5 (high): Cohesity TranZman Migration Appliance Release 4.0 Build 14614 was discovered to use a weak cryptography algorithm for data encryption…
• CVE-2025-63909 — CVSS 7.2 (high): Incorrect access control in the component /opt/SRLtzm/bin/TapeDumper of Cohesity TranZman Migration Appliance Release 4.0 Build 14614…
• CVE-2025-63910 — CVSS 7.2 (high): An authenticated arbitrary file upload vulnerability in Cohesity TranZman Migration Appliance Release 4.0 Build 14614 allows attackers with…
• CVE-2025-63911 — CVSS 7.2 (high): Cohesity TranZman Migration Appliance Release 4.0 Build 14614 was discovered to contain an authenticated command injection vulnerability.
• CVE-2025-67840 — CVSS 7.2 (high): Multiple authenticated OS command injection vulnerabilities exist in the Cohesity (formerly Stone Ram) TranZman 4.0 Build 14614 through…