Skip to contentYugabytedb Inc Yugabytedb vulnerabilities
- yugabytedb inc anywhereYugabyteDB Anywhere Exposes LDAP Credentials in Cleartext in Web UICVE-2026-19662.4 Low
- yugabytedb inc anywhereYugabyteDB Anywhere web server does not properly enforce authentication for the /metamaster...CVE-2025-88665.1 Medium
- yugabytedb inc yugabytedbThe YugabyteDB tablet server contains a flaw in its YCQL query handling that can trigger a null...CVE-2025-88654.1 Medium
- yugabytedb inc anywhereShared Access Signature token is not masked in the backup configuration response and is also...CVE-2025-88646.8 Medium
- yugabytedb inc yugabytedbYugabyteDB diagnostic information was transmitted over HTTP, which could expose sensitive data...CVE-2025-88637.0 High
- yugabytedb inc yugabytedbYugabyteDB has been collecting diagnostics information from YugabyteDB servers, which may include...CVE-2025-88627.0 High
- yugabytedb anywhereAn information disclosure vulnerability exists in Yugabyte Anywhere, where the LDAP bind password...CVE-2024-111935.0 Medium
- yugabytedb anywhereAn information disclosure vulnerability exists in the backup configuration process where the SAS...CVE-2024-111655.7 Medium
- yugabytedb anywhereAdmin Can Escalate Privileges to SuperAdmin Using Manual PUT RequestCVE-2024-69086.0 Medium
- yugabyte yugabytedb, yugabytedb anywhere +1 moreInsecure Account Profile ManagementCVE-2024-68956.1 Medium
- yugabyte yugabytedb, yugabytedb anywhere +1 moreDB User Password Leak in Application LogCVE-2024-00065.4 Medium
- yugabyte yugabytedbLog InjectionCVE-2023-60026.5 Medium
- yugabyte yugabytedb, yugabytedb anywhere +1 morePrometheus Metrics Accessible Pre-AuthenticationCVE-2023-60015.3 Medium
- yugabyte yugabytedbRemote Code ExecutionCVE-2023-05757.2 High
- yugabytedb anywhere, yugabyte yugabytedb managed +1 moreArbitrary File Write in High Availability Backup UploadCVE-2023-07456.7 Medium
- yugabyte yugabytedb managed, yugabytedb anywhere +1 moreServer-Side Request ForgeryCVE-2023-05746.8 Medium