Vendor
YugabyteDB
11 known vulnerabilities in products by YugabyteDB, 0 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-0745 | Arbitrary File Write in High Availability Backup Upload | 9.8 | |
| Critical | CVE-2023-0575 | Remote Code Execution | 7.2 | |
| Critical | CVE-2023-0574 | Server-Side Request Forgery | 6.8 | |
| High | CVE-2023-6001 | Prometheus Metrics Accessible Pre-Authentication | 5.3 | |
| Medium | CVE-2023-6002 | Log Injection | 6.5 | |
| Medium | CVE-2024-11193 | YugabyteDB Anywhere: Insertion of Sensitive Information into Log File | 6.5 | |
| High | CVE-2023-4640 | Set Logging Level Without Authentication | 6.5 | |
| Medium | CVE-2024-6908 | Admin Can Escalate Privileges to SuperAdmin Using Manual PUT Request | — | |
| Medium | CVE-2024-6895 | Insecure Account Profile Management | — | |
| Medium | CVE-2024-0006 | DB User Password Leak in Application Log | — | |
| Medium | CVE-2024-11165 | YugabyteDB Anywhere: Insertion of Sensitive Information into Log File | — |
Products
| Yugabytedb Anywhere | 8 | 0 |