Couchbase Server vulnerabilities, page 4
63 vulnerabilities
Known vulnerabilities in Couchbase Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2023-50782chainguardairflow+72
EPSS score1.12%
A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.CVE-2023-50436couchbasecouchbase_serverEPSS score0.24%
An issue was discovered in Couchbase Server before 7.2.4. ns_server admin credentials are leaked in encoded form in the diag.log file. The earliest affected version is 7.1.5.CVE-2023-50437couchbasecouchbase_serverEPSS score0.68%
An issue was discovered in Couchbase Server before 7.2.x before 7.2.4. otpCookie is shown with full admin on pools/default/serverGroups and engageCluster2.