Skip to contentYugabyte Yugabytedb vulnerabilities
- yugabyte yugabytedbYugabyteDB v2.21.1.0 was discovered to contain a buffer overflow via the "insert into" parameter.CVE-2024-414357.5 High
- yugabyte yugabytedb, yugabytedb anywhere +1 moreInsecure Account Profile ManagementCVE-2024-68956.1 Medium
- yugabyte yugabytedb, yugabytedb anywhere +1 moreDB User Password Leak in Application LogCVE-2024-00065.4 Medium
- yugabyte yugabytedbLog InjectionCVE-2023-60026.5 Medium
- yugabyte yugabytedb, yugabytedb anywhere +1 morePrometheus Metrics Accessible Pre-AuthenticationCVE-2023-60015.3 Medium
- yugabyte yugabytedb, yugabytedb anywhere +1 moreSet Logging Level Without AuthenticationCVE-2023-46406.5 Medium
- yugabyte yugabytedbRemote Code ExecutionCVE-2023-05757.2 High
- yugabytedb anywhere, yugabyte yugabytedb managed +1 moreArbitrary File Write in High Availability Backup UploadCVE-2023-07456.7 Medium
- yugabyte yugabytedb managed, yugabytedb anywhere +1 moreServer-Side Request ForgeryCVE-2023-05746.8 Medium
- yugabyte yugabytedb, yugabyte, inc. yugabyte db +1 moreThe software is vulnerable when using LDAP-based authentication in YCQL with Microsoft’s Active DirectoryCVE-2022-373978.3 High