Couchbase vulnerabilities

Products

• Server 63
• Sync Gateway 5

Newest

• couchbase sync gateway Couchbase Sync Gateway shows cleartext passwords in redacted and unredacted output CVE-2025-52490 Fix available 7.3 HighJuly 29, 2025
• couchbase .net sdk Couchbase .NET SDK (client library) does not properly enable hostname verification for TLS certificates CVE-2025-49015 Fix available 4.9 MediumJune 18, 2025
• couchbase server A security issue has been discovered in Couchbase Server before 7.6.4 and fixed in v.7.6.4 and v... CVE-2025-46619 7.6 HighApril 30, 2025
• couchbase server An issue was discovered in Couchbase Server 7.6.x through 7.6.3. A user with the... CVE-2024-56178 6.5 MediumJanuary 27, 2025
• couchbase server Couchbase Server 7.6.x before 7.6.2, 7.2.x before 7.2.6, and all earlier versions allows HTTP... CVE-2024-25673 6.1 MediumSeptember 19, 2024
• couchbase server An issue was discovered in Couchbase Server before 7.2.5 and 7.6.0 before 7.6.1. It does not... CVE-2024-37034 5.9 MediumJuly 26, 2024
• couchbase server An issue was discovered in Couchbase Server 6.6.x through 7.2.0, before 7.1.5 and 7.2.1.... CVE-2023-43768 7.5 HighMarch 27, 2024
• couchbase server Couchbase Server before 7.2.4 has a private key leak in goxdcr.log. CVE-2024-23302 7.5 HighFebruary 28, 2024
• couchbase server An issue was discovered in Couchbase Server before 7.2.x before 7.2.4. otpCookie is shown with... CVE-2023-50437 8.6 HighFebruary 28, 2024
• couchbase server An issue was discovered in Couchbase Server before 7.2.4. ns_server admin credentials are leaked... CVE-2023-50436 5.3 MediumFebruary 28, 2024
• couchbase server An issue was discovered in Couchbase Server before 7.2.4. An attacker can bypass SQL++ N1QL cURL... CVE-2023-49932 5.4 MediumFebruary 28, 2024
• couchbase server An issue was discovered in Couchbase Server before 7.2.4. SQL++ cURL calls to /diag/eval are not... CVE-2023-49931 9.8 CriticalFebruary 28, 2024
• couchbase server An issue was discovered in Couchbase Server before 7.2.4. cURL calls to /diag/eval are not... CVE-2023-49930 9.8 CriticalFebruary 28, 2024
• couchbase server Couchbase Server 7.1.x and 7.2.x before 7.2.4 does not require authentication for the /admin... CVE-2023-49338 7.5 HighFebruary 28, 2024
• couchbase server An issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of... CVE-2023-45874 4.3 MediumFebruary 28, 2024
• couchbase server An issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of... CVE-2023-45873 6.5 MediumFebruary 28, 2024
• couchbase server An issue was discovered in Couchbase Server through 7.1.4 before 7.1.5 and before 7.2.1. There... CVE-2023-43769 6.3 MediumFebruary 28, 2024
• google chrome, couchbase server, fedoraproject fedora +1 more +3 more Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote... CVE-2024-0519 In KEVPublic exploitFix available 8.8 HighJanuary 16, 2024
• couchbase server, cryptography.io cryptography, red hat ansible automation platform 2 +8 more +10 more Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659 CVE-2023-50782 Fix available 7.5 HighDecember 14, 2023
• couchbase server An issue was discovered in Couchbase Server 7.2.0. There is a private key leak in debug.log while... CVE-2023-45875 7.5 HighNovember 8, 2023
• couchbase server Couchbase Server 7.1.4 before 7.1.5 and 7.2.0 before 7.2.1 allows Directory Traversal. CVE-2023-36667 7.5 HighNovember 8, 2023
• google chrome, couchbase server, debian linux +2 more +4 more Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to... CVE-2023-3079 In KEVPublic exploitFix available EPSS 37.9% 8.8 HighJune 5, 2023
• google chrome, couchbase server, debian linux +2 more +4 more Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to... CVE-2023-2033 In KEVPublic exploitFix available EPSS 40.8% 8.8 HighApril 14, 2023
• couchbase server In Couchbase Server 5 through 7 before 7.1.4, the nsstats endpoint is accessible without... CVE-2023-28470 5.3 MediumMarch 23, 2023
• couchbase server Couchbase Server before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2 exposes Sensitive... CVE-2023-25016 7.5 HighFebruary 6, 2023
• couchbase server An issue was discovered in Couchbase Server 6.5.x and 6.6.x before 6.6.6, 7.x before 7.0.5, and 7... CVE-2022-42951 8.1 HighFebruary 6, 2023
• couchbase server An issue was discovered in Couchbase Server 7.x before 7.0.5 and 7.1.x before 7.1.2. A crafted... CVE-2022-42950 4.9 MediumFebruary 6, 2023
• couchbase server An issue was discovered in Couchbase Server before 7.0.4. A private key is leaked to the log... CVE-2022-32556 7.5 HighJuly 21, 2022
• couchbase server In Couchbase Server 7.1.x before 7.1.1, an encrypted Private Key passphrase may be leaked in the... CVE-2022-34826 5.9 MediumJuly 15, 2022
• couchbase server An issue was discovered in Couchbase Server 7.x before 7.0.4. Field names are not redacted in... CVE-2022-33911 5.3 MediumJuly 11, 2022
• couchbase server An algorithm-downgrade issue was discovered in Couchbase Server before 7.0.4. Analytics Remote... CVE-2022-33173 7.5 HighJuly 11, 2022
• couchbase server An issue was discovered in Couchbase Server before 7.0.4. Random HTTP requests lead to leaked... CVE-2022-32559 9.1 CriticalJune 14, 2022
• couchbase server An issue was discovered in Couchbase Server before 7.0.4. The Index Service does not enforce... CVE-2022-32557 7.5 HighJune 14, 2022
• couchbase server An issue was discovered in Couchbase Server before 6.6.5 and 7.x before 7.0.4. Previous... CVE-2022-32561 4.9 MediumJune 14, 2022
• couchbase server An issue was discovered in Couchbase Server before 7.0.4. The Backup Service log leaks unredacted... CVE-2022-32565 7.5 HighJune 13, 2022
• couchbase server An issue was discovered in Couchbase Server before 7.0.4. Operations may succeed on a collection... CVE-2022-32562 8.8 HighJune 13, 2022
• couchbase server Couchbase Server 5.x through 7.x before 7.0.4 exposes Sensitive Information to an Unauthorized... CVE-2022-32192 7.5 HighJune 13, 2022
• couchbase server Couchbase Server 6.6.x through 7.x before 7.0.4 exposes Sensitive Information to an Unauthorized... CVE-2022-32193 6.5 MediumJune 13, 2022
• couchbase server An issue was discovered in Couchbase Server before 7.0.4. Sample bucket loading may leak internal... CVE-2022-32558 7.5 HighJune 13, 2022
• couchbase server An issue was discovered in Couchbase Server before 7.0.4. XDCR lacks role checking when changing... CVE-2022-32560 7.5 HighJune 13, 2022
• couchbase server An issue was discovered in Couchbase Server before 7.0.4. In couchbase-cli, server-eshell leaks... CVE-2022-32564 7.5 HighJune 13, 2022
• couchbase sync gateway Couchbase Sync Gateway admin credentials not verified when using X.509 client cert authentication CVE-2022-32563 Fix available 9.8 CriticalJune 10, 2022
• blevesearch bleve Missing Role Based Access Control for the REST handlers in bleve/http package CVE-2022-31022 Fix available 6.2 MediumJune 1, 2022
• couchbase server Couchbase Server before 7.1.0 has Incorrect Access Control. CVE-2021-33504 4.9 MediumMay 31, 2022
• couchbase cloud native operator Couchbase Operator 2.2.x before 2.2.3 exposes Sensitive Information to an Unauthorized Actor.... CVE-2022-26311 7.5 HighMarch 7, 2022
• couchbase sync gateway An issue was discovered in Couchbase Sync Gateway 2.7.0 through 2.8.2. The bucket credentials... CVE-2021-43963 8.1 HighDecember 7, 2021
• couchbase server Couchbase Server before 6.6.3 and 7.x before 7.0.2 stores Sensitive Information in Cleartext. The... CVE-2021-42763 7.5 HighNovember 2, 2021
• couchbase server metakv in Couchbase Server 7.0.0 uses Cleartext for Storage of Sensitive Information. Remote... CVE-2021-37842 7.5 HighNovember 2, 2021
• couchbase server Couchbase Server 6.5.x, 6.6.x through 6.6.2, and 7.0.0 has a Buffer Overflow. A specially crafted... CVE-2021-35944 7.5 HighSeptember 29, 2021
• couchbase server Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control. Externally managed... CVE-2021-35943 9.8 CriticalSeptember 29, 2021
• Show olderLoading…