CO
Vendor
Couchbase
72
CVEs
3
On KEV
0
New 30D
Products
CS9.8
Couchbase Server
Couchbase
63 CVEs3 on KEV0 new
SG9.8
Sync Gateway
Couchbase
5 CVEs0 on KEV0 new
BL5.5
Bleve
Couchbase
1 CVEs0 on KEV0 new
CN7.5
Cloud Native Operator
Couchbase
1 CVEs0 on KEV0 new
CS7.5
Couchbase Server Java Sdk
Couchbase
1 CVEs0 on KEV0 new
NS4.9
.net Sdk
Couchbase
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-52490 | SG Sync Gateway Couchbase | 7.3 | Jul 29 | An issue was discovered in Couchbase Sync Gateway before 3.2.6 |
| CVE-2025-49015 | NS .net Sdk Couchbase | 4.9 | Jun 18 | The Couchbase .NET SDK (client library) before 3.7.1 does not properly enable hostname verification for TLS certificates |
| CVE-2025-46619 | CS Couchbase Server Couchbase | 7.6 | Apr 30 | A security issue has been discovered in Couchbase Server before 7.6.4 and fixed in v.7.6.4 and v.7.2.7 for Windows that could allow unauthorized access to sensitive files |
| CVE-2024-56178 | CS Couchbase Server Couchbase | 6.5 | Jan 27 | An issue was discovered in Couchbase Server 7.6.x through 7.6.3 |
| CVE-2024-25673 | CS Couchbase Server Couchbase | 6.1 | Sep 19 | Couchbase Server 7.6.x before 7.6.2, 7.2.x before 7.2.6, and all earlier versions allows HTTP Host header injection |
| CVE-2024-37034 | CS Couchbase Server Couchbase | 5.9 | Jul 26 | An issue was discovered in Couchbase Server before 7.2.5 and 7.6.0 before 7.6.1 |
| CVE-2023-43768 | CS Couchbase Server Couchbase | 7.5 | Mar 27 | An issue was discovered in Couchbase Server 6.6.x through 7.2.0, before 7.1.5 and 7.2.1 |
| CVE-2024-23302 | CS Couchbase Server Couchbase | 7.5 | Feb 29 | Couchbase Server before 7.2.4 has a private key leak in goxdcr.log |
| CVE-2023-50437 | CS Couchbase Server Couchbase | 8.6 | Feb 29 | An issue was discovered in Couchbase Server before 7.2.x before 7.2.4 |
| CVE-2023-50436 | CS Couchbase Server Couchbase | 5.3 | Feb 29 | An issue was discovered in Couchbase Server before 7.2.4 |
| CVE-2023-49932 | CS Couchbase Server Couchbase | 5.4 | Feb 29 | An issue was discovered in Couchbase Server before 7.2.4 |
| CVE-2023-49931 | CS Couchbase Server Couchbase | 9.8 | Feb 29 | An issue was discovered in Couchbase Server before 7.2.4 |
| CVE-2023-49930 | CS Couchbase Server Couchbase | 9.8 | Feb 29 | An issue was discovered in Couchbase Server before 7.2.4 |
| CVE-2023-45874 | CS Couchbase Server Couchbase | 4.3 | Feb 29 | An issue was discovered in Couchbase Server through 7.2.2 |
| CVE-2023-43769 | CS Couchbase Server Couchbase | 6.3 | Feb 29 | An issue was discovered in Couchbase Server through 7.1.4 before 7.1.5 and before 7.2.1 |
| CVE-2023-49338 | CS Couchbase Server Couchbase | 7.5 | Feb 28 | Couchbase Server 7.1.x and 7.2.x before 7.2.4 does not require authentication for the /admin/stats and /admin/vitals endpoints on TCP port 8093 of localhost |
| CVE-2023-45873 | CS Couchbase Server Couchbase | 6.5 | Feb 28 | An issue was discovered in Couchbase Server through 7.2.2 |
| CVE-2023-50782 | CS Couchbase Server Couchbase | 7.5 | Feb 5 | A flaw was found in the python-cryptography package |
| CVE-2024-0519 In wildKEV | CS Couchbase Server Couchbase | 8.8 | Jan 16 | Google Chromium V8 Out-of-Bounds Memory Access Vulnerability |
| CVE-2023-36667 | CS Couchbase Server Couchbase | 7.5 | Nov 8 | Couchbase Server 7.1.4 before 7.1.5 and 7.2.0 before 7.2.1 allows Directory Traversal |
| CVE-2023-45875 | CS Couchbase Server Couchbase | 7.5 | Nov 8 | An issue was discovered in Couchbase Server 7.2.0 |
| CVE-2023-3079 In wildKEV | CS Couchbase Server Couchbase | 8.8 | Jun 5 | Google Chromium V8 Type Confusion Vulnerability |
| CVE-2023-2033 In wildKEV | CS Couchbase Server Couchbase | 8.8 | Apr 14 | Google Chromium V8 Type Confusion Vulnerability |
| CVE-2023-28470 | CS Couchbase Server Couchbase | 5.3 | Mar 23 | In Couchbase Server 5 through 7 before 7.1.4, the nsstats endpoint is accessible without authentication |
| CVE-2023-25016 | CS Couchbase Server Couchbase | 7.5 | Feb 6 | Couchbase Server before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2 exposes Sensitive Information to an Unauthorized Actor |
| CVE-2022-42951 | CS Couchbase Server Couchbase | 8.1 | Feb 6 | An issue was discovered in Couchbase Server 6.5.x and 6.6.x before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2 |
| CVE-2022-42950 | CS Couchbase Server Couchbase | 4.9 | Feb 6 | An issue was discovered in Couchbase Server 7.x before 7.0.5 and 7.1.x before 7.1.2 |
| CVE-2022-32556 | CS Couchbase Server Couchbase | 7.5 | Jul 21 | An issue was discovered in Couchbase Server before 7.0.4 |
| CVE-2022-34826 | CS Couchbase Server Couchbase | 5.9 | Jul 15 | In Couchbase Server 7.1.x before 7.1.1, an encrypted Private Key passphrase may be leaked in the logs |
| CVE-2022-33911 | CS Couchbase Server Couchbase | 5.3 | Jul 12 | An issue was discovered in Couchbase Server 7.x before 7.0.4 |
| CVE-2022-33173 | CS Couchbase Server Couchbase | 7.5 | Jul 12 | An algorithm-downgrade issue was discovered in Couchbase Server before 7.0.4 |
| CVE-2022-32561 | CS Couchbase Server Couchbase | 4.9 | Jun 14 | An issue was discovered in Couchbase Server before 6.6.5 and 7.x before 7.0.4 |
| CVE-2022-32559 | CS Couchbase Server Couchbase | 9.1 | Jun 14 | An issue was discovered in Couchbase Server before 7.0.4 |
| CVE-2022-32557 | CS Couchbase Server Couchbase | 7.5 | Jun 14 | An issue was discovered in Couchbase Server before 7.0.4 |
| CVE-2022-32565 | CS Couchbase Server Couchbase | 7.5 | Jun 13 | An issue was discovered in Couchbase Server before 7.0.4 |
| CVE-2022-32562 | CS Couchbase Server Couchbase | 8.8 | Jun 13 | An issue was discovered in Couchbase Server before 7.0.4 |
| CVE-2022-32192 | CS Couchbase Server Couchbase | 7.5 | Jun 13 | Couchbase Server 5.x through 7.x before 7.0.4 exposes Sensitive Information to an Unauthorized Actor |
| CVE-2022-32564 | CS Couchbase Server Couchbase | 7.5 | Jun 13 | An issue was discovered in Couchbase Server before 7.0.4 |
| CVE-2022-32560 | CS Couchbase Server Couchbase | 7.5 | Jun 13 | An issue was discovered in Couchbase Server before 7.0.4 |
| CVE-2022-32558 | CS Couchbase Server Couchbase | 7.5 | Jun 13 | An issue was discovered in Couchbase Server before 7.0.4 |
| CVE-2022-32193 | CS Couchbase Server Couchbase | 6.5 | Jun 13 | Couchbase Server 6.6.x through 7.x before 7.0.4 exposes Sensitive Information to an Unauthorized Actor |
| CVE-2022-32563 | SG Sync Gateway Couchbase | 9.8 | Jun 10 | An issue was discovered in Couchbase Sync Gateway 3.x before 3.0.2 |
| CVE-2021-33504 | CS Couchbase Server Couchbase | 4.9 | Jun 2 | Couchbase Server before 7.1.0 has Incorrect Access Control |
| CVE-2022-31022 | BL Bleve Couchbase | 5.5 | Jun 1 | Bleve is a text indexing library for go |
| CVE-2022-26311 | CN Cloud Native Operator Couchbase | 7.5 | Mar 10 | Couchbase Operator 2.2.x before 2.2.3 exposes Sensitive Information to an Unauthorized Actor |
| CVE-2021-43963 | SG Sync Gateway Couchbase | 8.1 | Dec 7 | An issue was discovered in Couchbase Sync Gateway 2.7.0 through 2.8.2 |
| CVE-2021-42763 | CS Couchbase Server Couchbase | 7.5 | Nov 2 | Couchbase Server before 6.6.3 and 7.x before 7.0.2 stores Sensitive Information in Cleartext |
| CVE-2021-37842 | CS Couchbase Server Couchbase | 7.5 | Nov 2 | metakv in Couchbase Server 7.0.0 uses Cleartext for Storage of Sensitive Information |
| CVE-2021-35945 | CS Couchbase Server Couchbase | 7.5 | Sep 29 | Couchbase Server 6.5.x, 6.6.0 through 6.6.2, and 7.0.0, has a Buffer Overflow |
| CVE-2021-35944 | CS Couchbase Server Couchbase | 7.5 | Sep 29 | Couchbase Server 6.5.x, 6.6.x through 6.6.2, and 7.0.0 has a Buffer Overflow |
| CVE-2021-35943 | CS Couchbase Server Couchbase | 9.8 | Sep 29 | Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control |
| CVE-2021-25643 | CS Couchbase Server Couchbase | 4.9 | May 26 | An issue was discovered in Couchbase Server 5.x and 6.x before 6.5.2 and 6.6.x before 6.6.2 |
| CVE-2021-27924 | CS Couchbase Server Couchbase | 5.9 | May 19 | An issue was discovered in Couchbase Server 6.x through 6.6.1 |
| CVE-2021-31158 | CS Couchbase Server Couchbase | 6.5 | May 19 | In the Query Engine in Couchbase Server 6.5.x and 6.6.x through 6.6.1, Common Table Expression queries were not correctly checking the user's permissions, allowing read-access to… |
| CVE-2021-27925 | CS Couchbase Server Couchbase | 4.4 | May 19 | An issue was discovered in Couchbase Server 6.5.x and 6.6.x through 6.6.1 |
| CVE-2021-25644 | CS Couchbase Server Couchbase | 7.5 | May 19 | An issue was discovered in Couchbase Server 5.x and 6.x through 6.6.1 and 7.0.0 Beta |
| CVE-2021-25645 | CS Couchbase Server Couchbase | 4.4 | May 10 | An issue was discovered in Couchbase Server before 6.0.5, 6.1.x through 6.5.x before 6.5.2, and 6.6.x before 6.6.1 |
| CVE-2020-24719 | CS Couchbase Server Couchbase | 9.8 | Nov 12 | Exposed Erlang Cookie could lead to Remote Command Execution (RCE) attack |
| CVE-2020-9042 | CS Couchbase Server Couchbase | 8.8 | Jun 8 | In Couchbase Server 6.0, credentials cached by a browser can be used to perform a CSRF attack if an administrator has used their browser to check the results of a REST API request |
| CVE-2020-9041 | CS Couchbase Server Couchbase | 7.5 | Jun 8 | In Couchbase Server 6.0.3 and Couchbase Sync Gateway through 2.7.0, the Cluster management, views, query, and full-text search endpoints are vulnerable to the Slowloris… |