AI-generated from public sourcesThe starting point for every profile: auto-generated by 0-Doubt from public vendor materials, and not yet confirmed by the vendor or an independent analyst. Nothing here is hidden or overstated — it simply has not been reviewed yet.Where every profile starts, before the vendor or an analyst has reviewed it. A higher label means a more independent source — not a better product.How trust works →Secure coding rating: 35/100How this score is computedA product with no known CVEs starts at a neutral score and climbs the longer it goes without one; a product with known CVEs is penalized by severity instead. This one has 2 known CVEs (vendor-level match — see the CVE list below) and is tracked as ~51 days old in our catalog (a stand-in for real release date, which we don't track). The platform admin controls the formula's weights.
CTERA, founded in 2008 with operations in Israel and New York and backing from Benchmark Capital, Bessemer Venture Partners, Venrock, and Cisco, provides cloud storage and data-security solutions.
Known CVEs (2)About this listSourced from the public NVD database, matched by vendor name. Shown here at the vendor level — we don't track per-product/version data, so a listed CVE may affect a different product from this vendor, not necessarily this one. “New” means published within the last 30 days. “Actively exploited” means CISA's Known Exploited Vulnerabilities (KEV) catalog confirms real-world exploitation, not just a theoretical severity score. An “EPSS” chip appears at 10% and above: that is FIRST's estimated chance of exploitation in the next 30 days, which measures likelihood rather than impact and so can differ sharply from the severity beside it.
Server-Side Request Forgery (SSRF) vulnerability in Ctera Portal 8.1.x (8.1.1417.24) allows remote attackers to induce the server to make arbitrary HTTP requests via a crafted HTML file containing an …
Cross-site scripting (XSS) vulnerability in CTERA Cloud Storage OS before 3.2.29.0, 3.2.42.0, and earlier allows remote attackers to inject arbitrary web script or HTML via the description in a projec…
What it does
CTERA provides a hybrid cloud file platform that unifies distributed unstructured data, enabling organizations to modernize legacy NAS, secure data from ransomware and insider risks, enforce global compliance, and deliver low‑latency file access to anywhere‑workforces while supporting AI‑driven data insights.
Strengths
Hybrid cloud file platform
Unifies distributed unstructured data
Multi‑layered ransomware and insider risk protection
Global compliance enforcement with data residency and sovereignty
Low‑latency secure file access for distributed workforces
AI‑driven data understanding and recommendations
News about CTERA (6)Where this comes fromItems from CTERA's own public feeds — changelog, blog, GitHub releases or status page — that name CTERA in the headline or summary. News from CTERA that does not name this product is on the vendor's page instead. Each headline links to the original source; nothing here is written by 0-Doubt.
