Couchbase Server vulnerabilities | LiveThreat CVE Feed

Product

Couchbase Server

by Couchbase · last CVE Apr 30, 2025

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities63 In the news0 Timeline

Severity mix

Critical 8High 32Medium 23Low 0

Severity

All severities63 Critical8 High32 Medium23 Low0

Exploitation

On CISA KEV3 Exploited in the wild3

Watch

Add Couchbase Server to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-49932	5.4	1%	Feb 29	An issue was discovered in Couchbase Server before 7.2.4 Affected: 5.0.0 before 7.2.4
CVE-2023-50436	5.3	0%	Feb 29	An issue was discovered in Couchbase Server before 7.2.4 Affected: 7.1.5 before 7.2.4
CVE-2023-28470	5.3	1%	Mar 23	In Couchbase Server 5 through 7 before 7.1.4, the nsstats endpoint is accessible without authentication Affected: 6.6.0 before 7.1.4
CVE-2022-33911	5.3	1%	Jul 12	An issue was discovered in Couchbase Server 7.x before 7.0.4 Affected: 6.5.0 before 7.0.4
CVE-2019-11466	5.3	1%	Sep 10	In Couchbase Server 6.0.0 and 5.5.0, the eventing service exposes system diagnostic profile via an HTTP endpoint that does not require credentials on a port earmarked for internal… Affected: 5.5.0; 6.0.0
CVE-2019-11465	5.3	1%	Sep 10	An issue was discovered in Couchbase Server 5.5.x through 5.5.3 and 6.0.0 Affected: 5.5.0 through 5.5.3; 6.0.0
CVE-2022-42950	4.9	1%	Feb 6	An issue was discovered in Couchbase Server 7.x before 7.0.5 and 7.1.x before 7.1.2 Affected: 7.0.0 before 7.0.5; 7.1.0 before 7.1.2
CVE-2022-32561	4.9	1%	Jun 14	An issue was discovered in Couchbase Server before 6.6.5 and 7.x before 7.0.4 Affected: 5.0.0 before 6.6.5; 7.0.0 before 7.0.4
CVE-2021-33504	4.9	1%	Jun 2	Couchbase Server before 7.1.0 has Incorrect Access Control Affected: 2.0.0 before 7.1.0
CVE-2021-25643	4.9	1%	May 26	An issue was discovered in Couchbase Server 5.x and 6.x before 6.5.2 and 6.6.x before 6.6.2 Affected: 5.0.0 before 6.5.2; 6.6.0 before 6.6.2
CVE-2021-27925	4.4	1%	May 19	An issue was discovered in Couchbase Server 6.5.x and 6.6.x through 6.6.1 Affected: 6.5.0 before 6.6.2
CVE-2021-25645	4.4	0%	May 10	An issue was discovered in Couchbase Server before 6.0.5, 6.1.x through 6.5.x before 6.5.2, and 6.6.x before 6.6.1 Affected: before 6.0.5; 6.1.0 before 6.5.2; 6.6.0 before 6.6.1
CVE-2023-45874	4.3	1%	Feb 29	An issue was discovered in Couchbase Server through 7.2.2 Affected: 6.5.0 before 7.2.4