Vendor

    YugabyteDB

    9 known vulnerabilities in products by YugabyteDB, 0 of them actively exploited (CISA KEV).

    Key figures

    9

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in YugabyteDB
    HighCVE-2019-3800

    CF CLI writes the client id and secret to config file

    also in 15 other products

    		6.3
    CriticalCVE-2022-37397

    Yugabyte DB: Configuration

    		8.3
    CriticalCVE-2023-0745

    Arbitrary File Write in High Availability Backup Upload

    also in 1 other product

    		9.8
    CriticalCVE-2023-0575

    Remote Code Execution

    also in 1 other product

    		7.2
    HighCVE-2024-41435

    Yugabytedb: Buffer Overflow

    		7.5
    CriticalCVE-2023-0574

    Server-Side Request Forgery

    also in 1 other product

    		6.8
    HighCVE-2023-6001

    Prometheus Metrics Accessible Pre-Authentication

    also in 1 other product

    		5.3
    MediumCVE-2023-6002

    Log Injection

    also in 1 other product

    		6.5
    HighCVE-2023-4640

    Set Logging Level Without Authentication

    also in 1 other product

    		6.5

    Products

    Products by YugabyteDB
    YugabyteDB Anywhere60