What’s Vulnerable › Products

YugabyteDB vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your YugabyteDB version is affected

Latest YugabyteDB vulnerabilities

• CVE-2024-41435 — (CVSS 7.5)
• CVE-2024-0006 — DB User Password Leak in Application Log (CVSS 5.4)
• CVE-2023-6002 — Log Injection (CVSS 6.1)
• CVE-2023-6001 — Prometheus Metrics Accessible Pre-Authentication (CVSS 7.5)
• CVE-2023-4640 — Set Logging Level Without Authentication (CVSS 7.5)
• CVE-2023-0575 — Remote Code Execution (CVSS 9.8)
• CVE-2022-37397 — The software is vulnerable when using LDAP-based authentication in YCQL with Microsoft’s Active Directory (CVSS 9.8)