YA
Product
YugabyteDB Anywhere
3
CVEs
0
On KEV
6.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 2Low 1
Watch
Add YugabyteDB Anywhere to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-8864 | 6.8 | Aug 11 | Shared Access Signature token is not masked in the backup configuration response and is also exposed in the yb_backup logs Affected: 2.23.0.0 before 2.23.1.0; 2024.1.0.0 before 2024.1.3.0 |
| CVE-2025-8866 | 5.1 | Aug 11 | YugabyteDB Anywhere web server does not properly enforce authentication for the /metamaster/universe API endpoint Affected: 2024.*; 2.20.* |
| CVE-2026-1966 | 2.4 | Feb 5 | YugabyteDB Anywhere Exposes LDAP Credentials in Cleartext in Web UI Affected: 2025.1.0.0 before 2025.1.1.0; 2024.2.0.0 before 2024.2.6.0 |
Showing 3