Read the docs

YugabyteDB

Records20All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

YugabyteDB records in CISA KEV

No YugabyteDB vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Yugabytedb 6 records HIGH Yugabytedb Managed 2 records MEDIUM Db Enterprise 1 record LOW

Records

2 records in Yugabytedb Managed · all components

TI-2023-00707 CVE-2023-0745 · GHSA-48x7-56r4-ghvr

Arbitrary File Write in High Availability Backup Upload

Priority MEDIUM 43

The High Availability functionality of Yugabyte Anywhere can be abused to write arbitrary files through the backup upload endpoint by using path traversal characters.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00514 Published 2023-02-09 No fix listed CWE-23
TI-2023-00544 CVE-2023-0574 · GHSA-pvq4-73cw-rg9h

Server-side request forgery in YugabyteDB Anywhere

Priority MEDIUM 43

Server-Side Request Forgery (SSRF), Improperly Controlled Modification of Dynamically-Determined Object Attributes, Improper Restriction of Excessive Authentication Attempts vulnerability in YugaByte, Inc.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00637 Published 2023-02-09 No fix listed CWE-307
Open these records in search →