Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

YugabyteDB — Vulnerabilities & Security Advisories 11

Browse all 11 CVE security advisories affecting YugabyteDB. AI-powered Chinese analysis, POCs, and references for each vulnerability.

YugabyteDB serves as a distributed SQL database designed for cloud-native applications requiring high availability and scalability. Historically, its vulnerabilities have commonly included remote code execution, cross-site scripting, and privilege escalation risks, with 11 CVEs currently documented. The platform implements security features like encryption at rest and in transit, along with role-based access controls. While no major security incidents have been widely reported, the CVE count indicates potential attack surfaces that require regular patching. Organizations should implement network segmentation and strict access controls to mitigate risks, as the distributed nature of the database introduces complex security considerations beyond traditional relational databases.

CVE IDTitleCVSSSeverityPublished
CVE-2024-11193 YugabyteDB 安全漏洞 — YugabyteDB AnywhereCWE-532 7.8AIHighAI2024-11-13
CVE-2024-11165 YugabyteDB 安全漏洞 — YugabyteDB AnywhereCWE-532 4.9AIMediumAI2024-11-13
CVE-2024-6908 Admin Can Escalate Privileges to SuperAdmin Using Manual PUT Request — YugabyteDB AnywhereCWE-269 7.2 -2024-07-19
CVE-2024-6895 Insecure Account Profile Management — YugabyteDB AnywhereCWE-306 5.0 -2024-07-19
CVE-2024-0006 DB User Password Leak in Application Log — YugabyteDB AnywhereCWE-532 7.1 -2024-07-19
CVE-2023-6002 Log Injection — YugabyteDBCWE-117 6.5 Medium2023-11-07
CVE-2023-6001 Prometheus Metrics Accessible Pre-Authentication — YugabyteDB AnywhereCWE-200 5.3 Medium2023-11-07
CVE-2023-4640 Set Logging Level Without Authentication — AnywhereCWE-284 6.5 Medium2023-08-30
CVE-2023-0575 Remote Code Execution — YugabyteDBCWE-642 7.2 High2023-02-09
CVE-2023-0745 Arbitrary File Write in High Availability Backup Upload — YugabyteDB AnywhereCWE-23 6.7 Medium2023-02-09
CVE-2023-0574 Server-Side Request Forgery — YugabyteDB AnywhereCWE-918 6.8 Medium2023-02-09

This page lists every published CVE security advisory associated with YugabyteDB. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.