Yugabytedb vulnerabilities

Products

• Anywhere 8
• Yugabytedb 2

Newest

• yugabytedb anywhere An information disclosure vulnerability exists in Yugabyte Anywhere, where the LDAP bind password... CVE-2024-11193 5.0 MediumNovember 13, 2024
• yugabytedb anywhere An information disclosure vulnerability exists in the backup configuration process where the SAS... CVE-2024-11165 5.7 MediumNovember 13, 2024
• yugabytedb anywhere Admin Can Escalate Privileges to SuperAdmin Using Manual PUT Request CVE-2024-6908 6.0 MediumJuly 19, 2024
• yugabyte yugabytedb, yugabytedb anywhere +1 more Insecure Account Profile Management CVE-2024-6895 6.1 MediumJuly 19, 2024
• yugabyte yugabytedb, yugabytedb anywhere +1 more DB User Password Leak in Application Log CVE-2024-0006 5.4 MediumJuly 19, 2024
• yugabyte yugabytedb Log Injection CVE-2023-6002 6.5 MediumNovember 7, 2023
• yugabyte yugabytedb, yugabytedb anywhere +1 more Prometheus Metrics Accessible Pre-Authentication CVE-2023-6001 5.3 MediumNovember 7, 2023
• yugabyte yugabytedb, yugabytedb anywhere +1 more Set Logging Level Without Authentication CVE-2023-4640 6.5 MediumAugust 30, 2023
• yugabyte yugabytedb Remote Code Execution CVE-2023-0575 7.2 HighFebruary 9, 2023
• yugabytedb anywhere, yugabyte yugabytedb managed +1 more Arbitrary File Write in High Availability Backup Upload CVE-2023-0745 6.7 MediumFebruary 9, 2023
• yugabyte yugabytedb managed, yugabytedb anywhere +1 more Server-Side Request Forgery CVE-2023-0574 6.8 MediumFebruary 9, 2023