CS
Product
Couchbase Server
On CISA KEVExploited in the wild
63
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 32Medium 23Low 0
Watch
Add Couchbase Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-56178 | 6.5 | Jan 27 | An issue was discovered in Couchbase Server 7.6.x through 7.6.3 Affected: 7.6.0 through 7.6.3 |
| CVE-2023-45873 | 6.5 | Feb 28 | An issue was discovered in Couchbase Server through 7.2.2 Affected: before 7.2.3 |
| CVE-2022-32193 | 6.5 | Jun 13 | Couchbase Server 6.6.x through 7.x before 7.0.4 exposes Sensitive Information to an Unauthorized Actor Affected: 6.6.0 through 6.6.3; 7.0.0; 7.0.1; 7.0.2; 7.0.3 |
| CVE-2021-31158 | 6.5 | May 19 | In the Query Engine in Couchbase Server 6.5.x and 6.6.x through 6.6.1, Common Table Expression queries were not correctly checking the user's permissions, allowing read-access to… Affected: 6.5.0 before 6.6.2 |
| CVE-2023-43769 | 6.3 | Feb 29 | An issue was discovered in Couchbase Server through 7.1.4 before 7.1.5 and before 7.2.1 Affected: 6.0.0 before 7.2.4 |
| CVE-2024-25673 | 6.1 | Sep 19 | Couchbase Server 7.6.x before 7.6.2, 7.2.x before 7.2.6, and all earlier versions allows HTTP Host header injection Affected: 2.0.0 before 7.2.6; 7.6.0 before 7.6.2 |
| CVE-2019-11464 | 6.1 | Sep 10 | Some enterprises require that REST API endpoints include security-related headers in REST responses Affected: 5.1.2; 5.5.0 |
| CVE-2024-37034 | 5.9 | Jul 26 | An issue was discovered in Couchbase Server before 7.2.5 and 7.6.0 before 7.6.1 Affected: 6.0.0 before 7.2.5; 7.6.0 |
| CVE-2022-34826 | 5.9 | Jul 15 | In Couchbase Server 7.1.x before 7.1.1, an encrypted Private Key passphrase may be leaked in the logs Affected: 7.1.0 |
| CVE-2021-27924 | 5.9 | May 19 | An issue was discovered in Couchbase Server 6.x through 6.6.1 Affected: 6.0.0 before 6.6.2 |
| CVE-2023-49932 | 5.4 | Feb 29 | An issue was discovered in Couchbase Server before 7.2.4 Affected: 5.0.0 before 7.2.4 |
| CVE-2023-50436 | 5.3 | Feb 29 | An issue was discovered in Couchbase Server before 7.2.4 Affected: 7.1.5 before 7.2.4 |
| CVE-2023-28470 | 5.3 | Mar 23 | In Couchbase Server 5 through 7 before 7.1.4, the nsstats endpoint is accessible without authentication Affected: 6.6.0 before 7.1.4 |
| CVE-2022-33911 | 5.3 | Jul 12 | An issue was discovered in Couchbase Server 7.x before 7.0.4 Affected: 6.5.0 before 7.0.4 |
| CVE-2019-11466 | 5.3 | Sep 10 | In Couchbase Server 6.0.0 and 5.5.0, the eventing service exposes system diagnostic profile via an HTTP endpoint that does not require credentials on a port earmarked for internal… Affected: 5.5.0; 6.0.0 |
| CVE-2019-11465 | 5.3 | Sep 10 | An issue was discovered in Couchbase Server 5.5.x through 5.5.3 and 6.0.0 Affected: 5.5.0 through 5.5.3; 6.0.0 |
| CVE-2022-42950 | 4.9 | Feb 6 | An issue was discovered in Couchbase Server 7.x before 7.0.5 and 7.1.x before 7.1.2 Affected: 7.0.0 before 7.0.5; 7.1.0 before 7.1.2 |
| CVE-2022-32561 | 4.9 | Jun 14 | An issue was discovered in Couchbase Server before 6.6.5 and 7.x before 7.0.4 Affected: 5.0.0 before 6.6.5; 7.0.0 before 7.0.4 |
| CVE-2021-33504 | 4.9 | Jun 2 | Couchbase Server before 7.1.0 has Incorrect Access Control Affected: 2.0.0 before 7.1.0 |
| CVE-2021-25643 | 4.9 | May 26 | An issue was discovered in Couchbase Server 5.x and 6.x before 6.5.2 and 6.6.x before 6.6.2 Affected: 5.0.0 before 6.5.2; 6.6.0 before 6.6.2 |
| CVE-2021-27925 | 4.4 | May 19 | An issue was discovered in Couchbase Server 6.5.x and 6.6.x through 6.6.1 Affected: 6.5.0 before 6.6.2 |
| CVE-2021-25645 | 4.4 | May 10 | An issue was discovered in Couchbase Server before 6.0.5, 6.1.x through 6.5.x before 6.5.2, and 6.6.x before 6.6.1 Affected: before 6.0.5; 6.1.0 before 6.5.2; 6.6.0 before 6.6.1 |
| CVE-2023-45874 | 4.3 | Feb 29 | An issue was discovered in Couchbase Server through 7.2.2 Affected: 6.5.0 before 7.2.4 |
Showing 23