Vulnerabilities > Couchbase

DATE CVE VULNERABILITY TITLE RISK
2022-06-01 CVE-2022-31022 Authentication Bypass Using an Alternate Path or Channel vulnerability in Couchbase Bleve
Bleve is a text indexing library for go.
local
low complexity
couchbase CWE-288
2.1
2022-03-10 CVE-2022-26311 Unspecified vulnerability in Couchbase Cloud Native Operator
Couchbase Operator 2.2.x before 2.2.3 exposes Sensitive Information to an Unauthorized Actor.
network
low complexity
couchbase
5.0
2021-12-07 CVE-2021-43963 Information Exposure vulnerability in Couchbase Sync Gateway
An issue was discovered in Couchbase Sync Gateway 2.7.0 through 2.8.2.
network
low complexity
couchbase CWE-200
5.5
2021-11-02 CVE-2021-37842 Cleartext Storage of Sensitive Information vulnerability in Couchbase Server 7.0.0/7.0.1
metakv in Couchbase Server 7.0.0 uses Cleartext for Storage of Sensitive Information.
network
low complexity
couchbase CWE-312
5.0
2021-11-02 CVE-2021-42763 Cleartext Storage of Sensitive Information vulnerability in Couchbase Server
Couchbase Server before 6.6.3 and 7.x before 7.0.2 stores Sensitive Information in Cleartext.
network
low complexity
couchbase CWE-312
5.0
2021-09-29 CVE-2021-35943 Improper Authentication vulnerability in Couchbase Server
Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control.
network
low complexity
couchbase CWE-287
7.5
2021-09-29 CVE-2021-35944 Classic Buffer Overflow vulnerability in Couchbase Server
Couchbase Server 6.5.x, 6.6.x through 6.6.2, and 7.0.0 has a Buffer Overflow.
network
low complexity
couchbase CWE-120
5.0
2021-09-29 CVE-2021-35945 Classic Buffer Overflow vulnerability in Couchbase Server
Couchbase Server 6.5.x, 6.6.0 through 6.6.2, and 7.0.0, has a Buffer Overflow.
network
low complexity
couchbase CWE-120
5.0
2021-05-26 CVE-2021-25643 Cleartext Transmission of Sensitive Information vulnerability in Couchbase Server
An issue was discovered in Couchbase Server 5.x and 6.x before 6.5.2 and 6.6.x before 6.6.2.
network
low complexity
couchbase CWE-319
4.0
2021-05-19 CVE-2021-27924 Cleartext Transmission of Sensitive Information vulnerability in Couchbase Server
An issue was discovered in Couchbase Server 6.x through 6.6.1.
network
couchbase CWE-319
4.3