Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-62508 State: PUBLISHED Published: 2025-10-17T20:29:47.235Z Last Updated: 2025-10-17T20:54:23.336Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: StarCitizenTools Products: mediawiki-skins-Citizen Problem Types: CWE-79 Description: Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. Citizen from 3.3.0 to 3.9.0 are vulnerable to stored cross-site scripting in the sticky header button message handling. In stickyHeader.js the copyButtonAttributes function assigns innerHTML from a source element’s textContent when copying button labels. This causes escaped HTML in system message content (such as citizen-share, citi
textContent when copying button labels. This causes escaped HTML in system message content (such as citizen-share, citizen-view-history, citizen-view-edit, and nstab-talk) to be interpreted as HTML in the sticky header, allowing injection of arbitrary script by a user with the ability to edit interface messages. The vulnerability allows a user with the editinterface right but without the editsitejs right (by default the sysop group has editinterface but may not have editsitejs) to execute arbitrary JavaScript in other users’ sessions, enabling unauthorized access to sensitive data or actions. The issue is fixed in 3.9.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
ive data or actions. The issue is fixed in 3.9.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/StarCitizenTools/mediawiki-skins-Citizen/security/advisories/GHSA-g955-vw6w-v6pp - https://github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/e006923c6dbf113c9a025ca186ecc09fe7b93a15 - https://github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/fbb1d4fe9627281567706f3f6fc99a42ce16fdc4
CVE ID: CVE-2025-62509 State: PUBLISHED Published: 2025-10-20T17:38:49.999Z Last Updated: 2025-10-20T18:05:53.350Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: error311 Products: FileRise Problem Types: CWE-280, CWE-284 Description: FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to version 1.4.0, a business logic flaw in FileRise’s file/folder handling allows low-privilege users to perform unauthorized operations (view/delete/modify) on files created by other users. The root cause was inferring ownership/visibility from folder names (e.g., a folder named after a username) and missing server-side
use was inferring ownership/visibility from folder names (e.g., a folder named after a username) and missing server-side authorization/ownership checks across file operation endpoints. This amounted to an IDOR pattern: an attacker could operate on resources identified only by predictable names. This issue has been patched in version 1.4.0 and further hardened in version 1.5.0. A workaround for this issue involves restricting non-admin users to read-only or disable delete/rename APIs server-side, avoid creating top-level folders named after other usernames, and adding server-side checks that verify ownership before delete/rename/move. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen
-side checks that verify ownership before delete/rename/move. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/error311/FileRise/security/advisories/GHSA-6p87-q9rh-95wh - https://github.com/error311/FileRise/issues/53 - https://github.com/error311/FileRise/commit/25ce6a76beb60950359c0304765ad91a8aff8ad8
CVE ID: CVE-2025-62510 State: PUBLISHED Published: 2025-10-20T17:39:10.115Z Last Updated: 2025-10-20T18:04:16.356Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: error311 Products: FileRise Problem Types: CWE-280, CWE-284 Description: FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. In version 1.4.0, a regression allowed folder visibility/ownership to be inferred from folder names. Low-privilege users could see or interact with folders matching their username and, in some cases, other users’ content. This issue has been patched in version 1.5.0, where it introduces explicit per-folder ACLs (owners/read/wr
ers’ content. This issue has been patched in version 1.5.0, where it introduces explicit per-folder ACLs (owners/read/write/share/read_own) and strict server-side checks across list, read, write, share, rename, copy/move, zip, and WebDAV paths. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/error311/FileRise/security/advisories/GHSA-jm96-2w52-5qjj - https://github.com/error311/FileRise/issues/55 - https://github.com/error311/FileRise/commit/b6d86b78967baa2f5a1e191903fc4df13998d87f
CVE ID: CVE-2025-62511 State: PUBLISHED Published: 2025-10-17T19:55:34.825Z Last Updated: 2025-10-17T20:22:40.888Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: zheny-creator Products: YtGrabber-TUI Problem Types: CWE-367 Description: yt-grabber-tui is a C++ terminal user interface application for downloading YouTube content. yt-grabber-tui version 1.0 contains a Time-of-Check to Time-of-Use (TOCTOU) race condition (CWE-367) in the creation of the default configuration file config.json. In version 1.0, load_json_settings in Settings.hpp checks for the existence of config.json using boost::filesystem::exists and, if the file is missing, calls create_json_se
hecks for the existence of config.json using boost::filesystem::exists and, if the file is missing, calls create_json_settings which writes the JSON configuration with boost::property_tree::write_json. A local attacker with write access to the application’s configuration directory (~/.config/yt-grabber-tui on Linux or the current working directory on Windows) can create a symbolic link between the existence check and the subsequent write so that the write operation follows the symlink and overwrites an attacker-chosen file accessible to the running process. This enables arbitrary file overwrite within the privileges of the application process, which can corrupt files and cause loss of applic
itrary file overwrite within the privileges of the application process, which can corrupt files and cause loss of application or user data. If the application is executed with elevated privileges, this could extend to system file corruption. The issue is fixed in version 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zheny-creator/YtGrabber-TUI/security/advisories/GHSA-hwwf-fq6p-rw9q - https://github.com/zheny-creator/YtGrabber-TUI/commit/bf065e833820bb4253a70a4c1dc6b843c6d8bf21
CVE ID: CVE-2025-62513 State: PUBLISHED Published: 2025-10-22T19:18:59.643Z Last Updated: 2025-10-22T19:45:46.979Z Vendors: openbao Products: openbao Problem Types: CWE-532 Description: OpenBao is an open source identity-based secrets management system. In versions 2.2.0 to 2.4.1, OpenBao's audit log experienced a regression wherein raw HTTP bodies used by few endpoints were not correctly redacted (HMAC'd). This impacts those using the ACME functionality of PKI, resulting in short-lived ACME verification challenge codes being leaked in the audit logs. Additionally, this impacts those using the OIDC issuer functionality of the identity subsystem, auth and token response codes along with claim
acts those using the OIDC issuer functionality of the identity subsystem, auth and token response codes along with claims could be leaked in the audit logs. ACME verification codes are not usable after verification or challenge expiry so are of limited long-term use. This issue has been patched in OpenBao 2.4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/openbao/openbao/security/advisories/GHSA-ghfh-fmx4-26h8 - https://github.com/openbao/openbao/commit/cc2c476bac66e1d94776c2629793daec3af625f8
CVE ID: CVE-2025-62515 State: PUBLISHED Published: 2025-10-17T20:38:43.957Z Last Updated: 2025-10-17T20:56:21.532Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: marsupialtail Products: quokka Problem Types: CWE-502 Description: pyquokka is a framework for making data lakes work for time series. In versions 0.3.1 and prior, the FlightServer class directly uses pickle.loads() to deserialize action bodies received from Flight clients without any sanitization or validation in the do_action() method. The vulnerable code is located in pyquokka/flight.py at line 283 where arbitrary data from Flight clients is directly passed to pickle.loads(). When FlightServer
a/flight.py at line 283 where arbitrary data from Flight clients is directly passed to pickle.loads(). When FlightServer is configured to listen on 0.0.0.0, this allows attackers across the entire network to perform arbitrary remote code execution by sending malicious pickled payloads through the set_configs action. Additional vulnerability points exist in the cache_garbage_collect, do_put, and do_get functions where pickle.loads is used to deserialize untrusted remote data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/marsupialtail/quokka/security/advisories/GHSA-f74j-gffq-vm9p
CVE ID: CVE-2025-62516 State: REJECTED Published: 2025-10-27T19:46:32.122Z Last Updated: 2025-10-29T17:21:39.746Z Description: No description available.
CVE ID: CVE-2025-62517 State: PUBLISHED Published: 2025-10-23T19:52:15.376Z Last Updated: 2025-10-23T20:16:08.104Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: rollbar Products: rollbar.js Problem Types: CWE-1321 Description: Rollbar.js offers error tracking and logging from Javascript to Rollbar. In versions before 2.26.5 and from 3.0.0-alpha1 to before 3.0.0-beta5, there is a prototype pollution vulnerability in merge(). If application code calls rollbar.configure() with untrusted input, prototype pollution is possible. This issue has been fixed in versions 2.26.5 and 3.0.0-beta5. A workaround involves ensuring that values passed to rollbar.configure()
been fixed in versions 2.26.5 and 3.0.0-beta5. A workaround involves ensuring that values passed to rollbar.configure() do not contain untrusted input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/rollbar/rollbar.js/security/advisories/GHSA-xcg2-9pp4-j82x - https://github.com/rollbar/rollbar.js/pull/1390 - https://github.com/rollbar/rollbar.js/pull/1394 - https://github.com/rollbar/rollbar.js/commit/61032fe6c208b71e249514800808a54bcb8cb8bb - https://github.com/rollbar/rollbar.js/commit/d717def8b68f4a947975d0aebb729869cdb2d343
CVE ID: CVE-2025-62518 State: PUBLISHED Published: 2025-10-21T16:13:02.646Z Last Updated: 2025-10-22T13:23:33.408Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: astral-sh Products: tokio-tar Problem Types: CWE-843 Description: astral-tokio-tar is a tar archive reading/writing library for async Rust. Versions of astral-tokio-tar prior to 0.5.6 contain a boundary parsing vulnerability that allows attackers to smuggle additional archive entries by exploiting inconsistent PAX/ustar header handling. When processing archives with PAX-extended headers containing size overrides, the parser incorrectly advances stream position based on ustar header size (often zero)
ders containing size overrides, the parser incorrectly advances stream position based on ustar header size (often zero) instead of the PAX-specified size, causing it to interpret file content as legitimate tar headers. This issue has been patched in version 0.5.6. There are no workarounds. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/astral-sh/tokio-tar/security/advisories/GHSA-j5gw-2vrg-8fgx - https://github.com/astral-sh/uv/security/advisories/GHSA-w476-p2h3-79g9 - https://github.com/astral-sh/tokio-tar/commit/22b3f884adb7a2adf1d3a8d03469533f5cbc8318 - https://edera.dev/stories/tarmageddon - https://github.com/edera-dev/cve-tarmageddon
CVE ID: CVE-2025-62519 State: PUBLISHED Published: 2025-11-17T16:48:49.678Z Last Updated: 2025-11-17T16:59:09.772Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: thorsten Products: phpMyFAQ Problem Types: CWE-89 Description: phpMyFAQ is an open source FAQ web application. Prior to version 4.0.14, an authenticated SQL injection vulnerability in the main configuration update functionality of phpMyFAQ allows a privileged user with 'Configuration Edit' permissions to execute arbitrary SQL commands. Successful exploitation can lead to a full compromise of the database, including reading, modifying, or deleting all data, as well as potential remote code execution d
romise of the database, including reading, modifying, or deleting all data, as well as potential remote code execution depending on the database configuration. This issue has been patched in version 4.0.14. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-fxm2-cmwj-qvx4 - https://github.com/thorsten/phpMyFAQ/compare/4.0.13...4.0.14
CVE ID: CVE-2025-62520 State: PUBLISHED Published: 2025-11-04T21:31:13.261Z Last Updated: 2025-11-04T21:48:13.191Z Vendors: mantisbt Products: mantisbt Problem Types: CWE-285 Description: Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.27.1 and below, due to insufficient access-level checks, any non-admin user with access to manage_config_columns_page.php can use the Copy From action to retrieve the columns configuration from a private project they have no access to. This issue is fixed in version 2.27.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mantisbt/mantisbt/security/advisories/GHSA-g582-8vwr-68h2 - https://github.c
nrichment: References: - https://github.com/mantisbt/mantisbt/security/advisories/GHSA-g582-8vwr-68h2 - https://github.com/mantisbt/mantisbt/commit/4fe94f45fa2baea2aeb4b65781d2009e7b4a0bf3 - https://mantisbt.org/bugs/view.php?id=36502
CVE ID: CVE-2025-62522 State: PUBLISHED Published: 2025-10-20T19:57:13.188Z Last Updated: 2025-10-20T20:17:08.287Z Vendors: vitejs Products: vite Problem Types: CWE-22 Description: Vite is a frontend tooling framework for JavaScript. In versions from 2.9.18 to before 3.0.0, 3.2.9 to before 4.0.0, 4.5.3 to before 5.0.0, 5.2.6 to before 5.4.21, 6.0.0 to before 6.4.1, 7.0.0 to before 7.0.8, and 7.1.0 to before 7.1.11, files denied by server.fs.deny were sent if the URL ended with \ when the dev server is running on Windows. Only apps explicitly exposing the Vite dev server to the network and running the dev server on Windows were affected. This issue has been patched in versions 5.4.21, 6.4.1,
the network and running the dev server on Windows were affected. This issue has been patched in versions 5.4.21, 6.4.1, 7.0.8, and 7.1.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vitejs/vite/security/advisories/GHSA-93m4-6634-74q7 - https://github.com/vitejs/vite/commit/f479cc57c425ed41ceb434fecebd63931b1ed4ed
CVE ID: CVE-2025-62523 State: PUBLISHED Published: 2025-10-27T20:10:51.351Z Last Updated: 2025-10-27T20:38:52.301Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: THM-Health Products: PILOS Problem Types: CWE-942 Description: PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton. PILOS before 4.8.0 includes a Cross-Origin Resource Sharing (CORS) misconfiguration in its middleware: it reflects the Origin request header back in the Access-Control-Allow-Origin response header without proper validation or a whitelist, while Access-Control-Allow-Credentials is set to true. This behavior could allow a malicious website on a differen
list, while Access-Control-Allow-Credentials is set to true. This behavior could allow a malicious website on a different origin to send requests (including credentials) to the PILOS API. This may enable exfiltration or actions using the victim’s credentials if the server accepts those cross-origin requests as authenticated. Laravel’s session handling applies additional origin checks such that cross-origin requests are not authenticated by default. Because of these session-origin protections, and in the absence of any other unknown vulnerabilities that would bypass Laravel’s origin/session checks, this reflected-Origin CORS misconfiguration is not believed to be exploitable in typical PILOS
s origin/session checks, this reflected-Origin CORS misconfiguration is not believed to be exploitable in typical PILOS deployments. This vulnerability has been patched in PILOS in v4.8.0 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/THM-Health/PILOS/security/advisories/GHSA-pgfw-f4mp-5445 - https://github.com/THM-Health/PILOS/commit/14655bc4f8128ffd2b3c25004b01d9a802808da8
CVE ID: CVE-2025-62524 State: PUBLISHED Published: 2025-10-27T20:18:42.366Z Last Updated: 2025-10-27T20:39:26.086Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: THM-Health Products: PILOS Problem Types: CWE-200, CWE-497 Description: PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton. PILOS before 4.8.0 exposes the PHP version via the X-Powered-By header, enabling attackers to fingerprint the server and assess potential exploits. This information disclosure vulnerability originates from PHP’s base image. Additionally, the PHP version can also be inferred through the PILOS version displayed in the footer and by examining th
Additionally, the PHP version can also be inferred through the PILOS version displayed in the footer and by examining the source code available on GitHub. This information disclosure vulnerability has been patched in PILOS in v4.8.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/THM-Health/PILOS/security/advisories/GHSA-q93h-5j6h-j22x - https://github.com/THM-Health/PILOS/commit/14655bc4f8128ffd2b3c25004b01d9a802808da8
CVE ID: CVE-2025-62525 State: PUBLISHED Published: 2025-10-22T14:59:15.265Z Last Updated: 2025-10-22T17:24:17.273Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H) Vendors: openwrt Products: openwrt Problem Types: CWE-20, CWE-125, CWE-787 Description: OpenWrt Project is a Linux operating system targeting embedded devices. Prior to version 24.10.4, local users could read and write arbitrary kernel memory using the ioctls of the ltq-ptm driver which is used to drive the datapath of the DSL line. This only effects the lantiq target supporting xrx200, danube and amazon SoCs from Lantiq/Intel/MaxLinear with the DSL in PTM mode. The DSL driver for the VRX518 is not affected.
be and amazon SoCs from Lantiq/Intel/MaxLinear with the DSL in PTM mode. The DSL driver for the VRX518 is not affected. ATM mode is also not affected. Most VDSL lines use PTM mode and most ADSL lines use ATM mode. OpenWrt is normally running as a single user system, but some services are sandboxed. This vulnerability could allow attackers to escape a ujail sandbox or other contains. This is fixed in OpenWrt 24.10.4. There are no workarounds. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/openwrt/openwrt/security/advisories/GHSA-h427-frpr-7cqr - https://github.com/openwrt/openwrt/commit/2a76abc5442e3f74d95b4caa9bb57e5488fc132e - https://github.com/openwrt/
-7cqr - https://github.com/openwrt/openwrt/commit/2a76abc5442e3f74d95b4caa9bb57e5488fc132e - https://github.com/openwrt/openwrt/commit/e001b31163a77683ee741d169f794cfa50926f37 - https://openwrt.org/advisory/2025-10-22-2
CVE ID: CVE-2025-62526 State: PUBLISHED Published: 2025-10-22T14:59:43.577Z Last Updated: 2025-10-22T15:55:03.299Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H) Vendors: openwrt Products: openwrt Problem Types: CWE-122 Description: OpenWrt Project is a Linux operating system targeting embedded devices. Prior to version 24.10.4, ubusd contains a heap buffer overflow in the event registration parsing code. This allows an attacker to modify the head and potentially execute arbitrary code in the context of the ubus daemon. The affected code is executed before running the ACL checks, all ubus clients are able to send such messages. In addition to the heap corruption, the
before running the ACL checks, all ubus clients are able to send such messages. In addition to the heap corruption, the crafted subscription also results in a bypass of the listen ACL. This is fixed in OpenWrt 24.10.4. There are no workarounds. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/openwrt/openwrt/security/advisories/GHSA-cp32-65v4-cp73 - https://github.com/openwrt/openwrt/commit/4b907e69ea58fc0ba35fd1755dc4ba22262af3a4 - https://github.com/openwrt/openwrt/commit/a7901969932a175cded3c93bdeb65f32ed3705e6 - https://github.com/openwrt/ubus/commit/60e04048a0e2f3e33651c19e62861b41be4c290f - https://github.com/openwrt/ubus/commit/aa4a7ee1d3417bc11207ad
wrt/ubus/commit/60e04048a0e2f3e33651c19e62861b41be4c290f - https://github.com/openwrt/ubus/commit/aa4a7ee1d3417bc11207ad0a78d579ece7fe0c13 - https://github.com/openwrt/ubus/commit/d31effb4277bd557f5ccf16d909422718c1e49d0 - https://openwrt.org/advisory/2025-10-22-1
CVE ID: CVE-2025-62527 State: PUBLISHED Published: 2025-10-20T20:03:29.405Z Last Updated: 2025-10-20T20:18:18.800Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N) Vendors: remram44 Products: taguette Problem Types: CWE-15 Description: Taguette is an open source qualitative research tool. An issue has been discovered in Taguette versions prior to 1.5.0. It was possible for an attacker to request password reset email containing a malicious link, allowing the attacker to set the email if clicked by the victim. This issue has been patched in version 1.5.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/remram44/taguette/security/advisor
. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/remram44/taguette/security/advisories/GHSA-7rc8-5c8q-jr6j - https://gitlab.com/remram44/taguette/-/issues/331
CVE ID: CVE-2025-62528 State: PUBLISHED Published: 2025-10-20T20:03:33.177Z Last Updated: 2025-10-20T20:18:54.054Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: remram44 Products: taguette Problem Types: CWE-79 Description: Taguette is an open source qualitative research tool. An issue has been discovered in Taguette versions prior to 1.5.0. It was possible for a project member to put JavaScript in name or description fields which would run on project load. This issue has been patched in version 1.5.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/remram44/taguette/security/advisories/GHSA-g9qw-g6rv-3889 - https://gitl
Vulnrichment: References: - https://github.com/remram44/taguette/security/advisories/GHSA-g9qw-g6rv-3889 - https://gitlab.com/remram44/taguette/-/issues/330
CVE ID: CVE-2025-62577 State: PUBLISHED Published: 2025-10-20T05:32:41.402Z Last Updated: 2025-11-03T16:06:00.674Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Fsas Technologies Inc. Products: ETERNUS SF AdvancedCopy Manager Standard Edition (for Solaris 10/ 11), ETERNUS SF Storage Cruiser (for Solaris 10/ 11), ETERNUS SF AdvancedCopy Manager Standard Edition (for RHEL 7/ 8/ 9), ETERNUS SF Expressn (for RHEL 7/ 8/ 9), ETERNUS SF Storage Cruisern (for RHEL 7/ 8/ 9), ETERNUS SF AdvancedCopy Manager Standard Edition (for Windows Server 2016/ 2019/ 2022), ETERNUS SF Express (for Windows Server 2016/ 2019/ 2022), ETERNUS SF Storage Cruiser (for Windows Server 20