CO
Product
CouchDB
On CISA KEVExploited in the wild
20
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 7Medium 2Low 0
Watch
Add CouchDB to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-24706 In wildKEV | 9.8 | Apr 26 | Remote Code Execution Vulnerability in Packaging Affected: before 3.2.2 |
| CVE-2020-1955 | 9.8 | May 20 | CouchDB version 3.0.0 shipped with a new configuration setting that governs access control to the entire database server called `require_valid_user_except_for_up` Affected: 3.0.0 |
| CVE-2017-12635 | 9.8 | Nov 14 | Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to submit _users documents… Affected: before 1.7.0; 2.0.0; 2.0.0; 2.0.0; 2.0.0; 2.0.0 |
Showing 3