Login Request a demo
CO
Product
CouchDB
by Apache · last CVE Dec 13, 2023
On CISA KEVExploited in the wild
20
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities20In the news0Timeline
Severity mix
Critical 3High 7Medium 2Low 0
Severity
All severities20Critical3High7Medium2Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add CouchDB to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-14889
7.8
1%
Sep 21
CouchDB in Vectra Networks Cognito Brain and Sensor before 4.3 contains a local code execution vulnerability
Affected: All versions, or not specified
CVE-2016-8742
7.8
2%
Feb 12
The Windows installer that the Apache CouchDB team provides was vulnerable to local privilege escalation
Affected: 2.0.0
CVE-2021-38295
7.3
3%
Oct 14
In Apache CouchDB, a malicious user with permission to create documents in a database is able to attach a HTML attachment to a document
Affected: before 3.1.2
CVE-2018-17188
7.2
4%
Jan 2
Prior to CouchDB version 2.3.0, CouchDB allowed for runtime-configuration of key components of the database
Affected: before 2.3.0
CVE-2018-11769
7.2
8%
Aug 8
CouchDB administrative users before 2.2.0 can configure the database server via HTTP(S)
Affected: before 2.2.0
CVE-2018-8007
7.2
12%
Jul 11
Apache CouchDB administrative users can configure the database server via HTTP(S)
Affected: through 1.7.1; 2.0.0 through 2.1.1
CVE-2017-12636
7.2
91%
Nov 14
CouchDB administrative users can configure the database server via HTTP(S)
Affected: before 1.7.0; 2.0.0; 2.0.0; 2.0.0; 2.0.0; 2.0.0
Showing 7