CS
Product
Couchbase Server
On CISA KEVExploited in the wild
63
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 32Medium 23Low 0
Watch
Add Couchbase Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-49931 | 9.8 | Feb 29 | An issue was discovered in Couchbase Server before 7.2.4 Affected: 5.0.0 before 7.2.4 |
| CVE-2023-49930 | 9.8 | Feb 29 | An issue was discovered in Couchbase Server before 7.2.4 Affected: 7.1.5 before 7.2.4 |
| CVE-2021-35943 | 9.8 | Sep 29 | Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control Affected: 6.5.0 through 6.5.2; 6.6.0 before 6.6.3 |
| CVE-2020-24719 | 9.8 | Nov 12 | Exposed Erlang Cookie could lead to Remote Command Execution (RCE) attack Affected: 6.5.1 before 6.6.0 |
| CVE-2020-9039 | 9.8 | Feb 22 | Couchbase Server 4.0.0, 4.1.0, 4.1.1, 4.5.0, 4.5.1, 4.6.0 through 4.6.5, 5.0.0, 5.1.1, 5.5.0 and 5.5.1 have Insecure Permissions for the projector and indexer REST endpoints (they… Affected: 4.6.0 through 4.6.5; 4.0.0; 4.1.0; 4.1.1; 4.5.0; 4.5.1; +4 more |
| CVE-2019-11495 | 9.8 | Sep 10 | In Couchbase Server 5.1.1, the cookie used for intra-node communication was not generated securely Affected: 5.1.1 |
| CVE-2022-32559 | 9.1 | Jun 14 | An issue was discovered in Couchbase Server before 7.0.4 Affected: 4.0.0 before 7.0.4 |
| CVE-2019-11496 | 9.1 | Sep 10 | In versions of Couchbase Server prior to 5.0, the bucket named "default" was a special bucket that allowed read and write access without authentication Affected: through 5.0.0 |
Showing 8