Read the docs

Couchbase

Records71All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical10CVSS 9.0–10.0
CVSS high36CVSS 7.0–8.9

Exploited now

Couchbase records in CISA KEV
TI-2024-00478 Google Chromium V8 Out-of-Bounds Memory Access Vulnerability Priority CRITICAL 97KEV 2024-01-17TI-2023-02885 Google Chromium V8 Type Confusion Vulnerability Priority CRITICAL 97KEV 2023-06-07TI-2023-01910 Google Chromium V8 Type Confusion Vulnerability Priority CRITICAL 97KEV 2023-04-17

Components

Products in the NVD configurations · select one to filter the records
Couchbase Server 63 records CRITICAL Sync Gateway 5 records MEDIUM .net Sdk 1 record LOW Bleve 1 record LOW Cloud Native Operator 1 record LOW Couchbase Server Java Sdk 1 record LOW

Records

5 records in Sync Gateway · all components

TI-2019-06524 CVE-2019-9039 · GHSA-g622-r636-qfqh

In Couchbase Sync Gateway 2.1.2, an attacker with access to the Sync Gateway’s public…

Priority MEDIUM 47

In Couchbase Sync Gateway 2.1.2, an attacker with access to the Sync Gateway’s public REST API was able to issue additional N1QL statements and extract sensitive data or call arbitrary N1QL functions through the paramete…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02741 Published 2019-06-26 Fixed in 2.5.0 CWE-89
TI-2020-07257 CVE-2020-9041 · GHSA-v8jf-vgq7-838j

In Couchbase Server 6.0.3 and Couchbase Sync Gateway through 2.7.0, the Cluster…

Priority LOW 35

In Couchbase Server 6.0.3 and Couchbase Sync Gateway through 2.7.0, the Cluster management, views, query, and full-text search endpoints are vulnerable to the Slowloris denial-of-service attack because they don't more ag…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01309 Published 2020-06-08 No fix listed CWE-404
Open these records in search →