Product by YugabyteDB

    Yugabytedb Anywhere

    8 known vulnerabilities in Yugabytedb Anywhere (YugabyteDB), 0 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Yugabytedb Anywhere (YugabyteDB)
    CriticalCVE-2023-0745

    Arbitrary File Write in High Availability Backup Upload

    also in 1 other product

    		9.8
    CriticalCVE-2023-0574

    Server-Side Request Forgery

    also in 1 other product

    		6.8
    HighCVE-2023-6001

    Prometheus Metrics Accessible Pre-Authentication

    also in 1 other product

    		5.3
    MediumCVE-2024-11193

    YugabyteDB Anywhere: Insertion of Sensitive Information into Log File

    		6.5
    MediumCVE-2024-6908

    Admin Can Escalate Privileges to SuperAdmin Using Manual PUT Request

    		—
    MediumCVE-2024-6895

    Insecure Account Profile Management

    		—
    MediumCVE-2024-0006

    DB User Password Leak in Application Log

    		—
    MediumCVE-2024-11165

    YugabyteDB Anywhere: Insertion of Sensitive Information into Log File

    		—

    All products by YugabyteDB