[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_ox2gTQOZiO9q1_qzk9dIfY07JoMQoAqkZDC1wvWfCI":3,"g5a-family:couchbase\u002Fcouchbase_server":319,"g5a-ex:couchbase\u002Fcouchbase_server@*":322},{"success":4,"data":5},true,{"product":6,"versions":158,"topVulnerabilitiesByEpss":227,"kevVulnerabilities":284,"seoMetadata":297,"meta":316},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":157},"couchbase","couchbase_server",68,63,3,"2025-04-30",[14,18,21,23,25,27,29,31,33,35,37,39,42,44,46,48,50,52,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,100,102,104,106,108,110,112,114,116,118,120,122,124,127,129,131,133,135,137,139,141,143,145,147,149,151,153,155],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"2.0.0",0,false,{"version":19,"cve_count":20,"kev_count":16,"has_kev":17},"4.0.0",1,{"version":22,"cve_count":20,"kev_count":16,"has_kev":17},"4.1.0",{"version":24,"cve_count":20,"kev_count":16,"has_kev":17},"4.1.1",{"version":26,"cve_count":20,"kev_count":16,"has_kev":17},"4.5.0",{"version":28,"cve_count":20,"kev_count":16,"has_kev":17},"4.5.1",{"version":30,"cve_count":16,"kev_count":16,"has_kev":17},"4.6.0",{"version":32,"cve_count":16,"kev_count":16,"has_kev":17},"4.6.2",{"version":34,"cve_count":20,"kev_count":16,"has_kev":17},"4.6.3",{"version":36,"cve_count":16,"kev_count":16,"has_kev":17},"4.6.4",{"version":38,"cve_count":16,"kev_count":16,"has_kev":17},"4.6.5",{"version":40,"cve_count":41,"kev_count":16,"has_kev":17},"5.0.0",2,{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},"5.0.1",{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},"5.1.0",{"version":47,"cve_count":41,"kev_count":16,"has_kev":17},"5.1.1",{"version":49,"cve_count":20,"kev_count":16,"has_kev":17},"5.1.2",{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},"5.1.3",{"version":53,"cve_count":54,"kev_count":16,"has_kev":17},"5.5.0",4,{"version":56,"cve_count":20,"kev_count":16,"has_kev":17},"5.5.1",{"version":58,"cve_count":16,"kev_count":16,"has_kev":17},"5.5.2",{"version":60,"cve_count":16,"kev_count":16,"has_kev":17},"5.5.3",{"version":62,"cve_count":16,"kev_count":16,"has_kev":17},"5.5.4",{"version":64,"cve_count":16,"kev_count":16,"has_kev":17},"5.5.5",{"version":66,"cve_count":16,"kev_count":16,"has_kev":17},"5.5.6",{"version":68,"cve_count":16,"kev_count":16,"has_kev":17},"6.0",{"version":70,"cve_count":11,"kev_count":16,"has_kev":17},"6.0.0",{"version":72,"cve_count":16,"kev_count":16,"has_kev":17},"6.0.1",{"version":74,"cve_count":16,"kev_count":16,"has_kev":17},"6.0.2",{"version":76,"cve_count":20,"kev_count":16,"has_kev":17},"6.0.3",{"version":78,"cve_count":16,"kev_count":16,"has_kev":17},"6.0.4",{"version":80,"cve_count":16,"kev_count":16,"has_kev":17},"6.0.5",{"version":82,"cve_count":16,"kev_count":16,"has_kev":17},"6.5.0",{"version":84,"cve_count":16,"kev_count":16,"has_kev":17},"6.5.1",{"version":86,"cve_count":16,"kev_count":16,"has_kev":17},"6.5.2",{"version":88,"cve_count":16,"kev_count":16,"has_kev":17},"6.6.0",{"version":90,"cve_count":16,"kev_count":16,"has_kev":17},"6.6.1",{"version":92,"cve_count":16,"kev_count":16,"has_kev":17},"6.6.2",{"version":94,"cve_count":16,"kev_count":16,"has_kev":17},"6.6.3",{"version":96,"cve_count":16,"kev_count":16,"has_kev":17},"6.6.6",{"version":98,"cve_count":99,"kev_count":16,"has_kev":17},"7.0.0",7,{"version":101,"cve_count":54,"kev_count":16,"has_kev":17},"7.0.1",{"version":103,"cve_count":41,"kev_count":16,"has_kev":17},"7.0.2",{"version":105,"cve_count":41,"kev_count":16,"has_kev":17},"7.0.3",{"version":107,"cve_count":16,"kev_count":16,"has_kev":17},"7.0.4",{"version":109,"cve_count":16,"kev_count":16,"has_kev":17},"7.0.5",{"version":111,"cve_count":20,"kev_count":16,"has_kev":17},"7.1.0",{"version":113,"cve_count":16,"kev_count":16,"has_kev":17},"7.1.1",{"version":115,"cve_count":16,"kev_count":16,"has_kev":17},"7.1.2",{"version":117,"cve_count":16,"kev_count":16,"has_kev":17},"7.1.3",{"version":119,"cve_count":16,"kev_count":16,"has_kev":17},"7.1.4",{"version":121,"cve_count":16,"kev_count":16,"has_kev":17},"7.1.5",{"version":123,"cve_count":16,"kev_count":16,"has_kev":17},"7.1.6",{"version":125,"cve_count":126,"kev_count":41,"has_kev":4},"7.2.0",5,{"version":128,"cve_count":16,"kev_count":16,"has_kev":17},"7.2.1",{"version":130,"cve_count":16,"kev_count":16,"has_kev":17},"7.2.2",{"version":132,"cve_count":16,"kev_count":16,"has_kev":17},"7.2.3",{"version":134,"cve_count":16,"kev_count":16,"has_kev":17},"7.2.4",{"version":136,"cve_count":16,"kev_count":16,"has_kev":17},"7.2.5",{"version":138,"cve_count":16,"kev_count":16,"has_kev":17},"7.2.6",{"version":140,"cve_count":16,"kev_count":16,"has_kev":17},"7.2.7",{"version":142,"cve_count":41,"kev_count":16,"has_kev":17},"7.6.0",{"version":144,"cve_count":20,"kev_count":16,"has_kev":17},"7.6.1",{"version":146,"cve_count":16,"kev_count":16,"has_kev":17},"7.6.2",{"version":148,"cve_count":16,"kev_count":16,"has_kev":17},"7.6.3",{"version":150,"cve_count":16,"kev_count":16,"has_kev":17},"7.6.4",{"version":152,"cve_count":16,"kev_count":16,"has_kev":17},"7.6.5",{"version":154,"cve_count":16,"kev_count":16,"has_kev":17},"7.6.6",{"version":156,"cve_count":16,"kev_count":16,"has_kev":17},"7.6.7","Couchbase Server by Couchbase is a technology product with 68 tracked versions and 63 known security vulnerabilities including 3 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":20,"kev_count":16,"has_kev":17},{"version":22,"cve_count":20,"kev_count":16,"has_kev":17},{"version":24,"cve_count":20,"kev_count":16,"has_kev":17},{"version":26,"cve_count":20,"kev_count":16,"has_kev":17},{"version":28,"cve_count":20,"kev_count":16,"has_kev":17},{"version":30,"cve_count":16,"kev_count":16,"has_kev":17},{"version":32,"cve_count":16,"kev_count":16,"has_kev":17},{"version":34,"cve_count":20,"kev_count":16,"has_kev":17},{"version":36,"cve_count":16,"kev_count":16,"has_kev":17},{"version":38,"cve_count":16,"kev_count":16,"has_kev":17},{"version":40,"cve_count":41,"kev_count":16,"has_kev":17},{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},{"version":47,"cve_count":41,"kev_count":16,"has_kev":17},{"version":49,"cve_count":20,"kev_count":16,"has_kev":17},{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},{"version":53,"cve_count":54,"kev_count":16,"has_kev":17},{"version":56,"cve_count":20,"kev_count":16,"has_kev":17},{"version":58,"cve_count":16,"kev_count":16,"has_kev":17},{"version":60,"cve_count":16,"kev_count":16,"has_kev":17},{"version":62,"cve_count":16,"kev_count":16,"has_kev":17},{"version":64,"cve_count":16,"kev_count":16,"has_kev":17},{"version":66,"cve_count":16,"kev_count":16,"has_kev":17},{"version":68,"cve_count":16,"kev_count":16,"has_kev":17},{"version":70,"cve_count":11,"kev_count":16,"has_kev":17},{"version":72,"cve_count":16,"kev_count":16,"has_kev":17},{"version":74,"cve_count":16,"kev_count":16,"has_kev":17},{"version":76,"cve_count":20,"kev_count":16,"has_kev":17},{"version":78,"cve_count":16,"kev_count":16,"has_kev":17},{"version":80,"cve_count":16,"kev_count":16,"has_kev":17},{"version":82,"cve_count":16,"kev_count":16,"has_kev":17},{"version":84,"cve_count":16,"kev_count":16,"has_kev":17},{"version":86,"cve_count":16,"kev_count":16,"has_kev":17},{"version":88,"cve_count":16,"kev_count":16,"has_kev":17},{"version":90,"cve_count":16,"kev_count":16,"has_kev":17},{"version":92,"cve_count":16,"kev_count":16,"has_kev":17},{"version":94,"cve_count":16,"kev_count":16,"has_kev":17},{"version":96,"cve_count":16,"kev_count":16,"has_kev":17},{"version":98,"cve_count":99,"kev_count":16,"has_kev":17},{"version":101,"cve_count":54,"kev_count":16,"has_kev":17},{"version":103,"cve_count":41,"kev_count":16,"has_kev":17},{"version":105,"cve_count":41,"kev_count":16,"has_kev":17},{"version":107,"cve_count":16,"kev_count":16,"has_kev":17},{"version":109,"cve_count":16,"kev_count":16,"has_kev":17},{"version":111,"cve_count":20,"kev_count":16,"has_kev":17},{"version":113,"cve_count":16,"kev_count":16,"has_kev":17},{"version":115,"cve_count":16,"kev_count":16,"has_kev":17},{"version":117,"cve_count":16,"kev_count":16,"has_kev":17},{"version":119,"cve_count":16,"kev_count":16,"has_kev":17},{"version":121,"cve_count":16,"kev_count":16,"has_kev":17},{"version":123,"cve_count":16,"kev_count":16,"has_kev":17},{"version":125,"cve_count":126,"kev_count":41,"has_kev":4},{"version":128,"cve_count":16,"kev_count":16,"has_kev":17},{"version":130,"cve_count":16,"kev_count":16,"has_kev":17},{"version":132,"cve_count":16,"kev_count":16,"has_kev":17},{"version":134,"cve_count":16,"kev_count":16,"has_kev":17},{"version":136,"cve_count":16,"kev_count":16,"has_kev":17},{"version":138,"cve_count":16,"kev_count":16,"has_kev":17},{"version":140,"cve_count":16,"kev_count":16,"has_kev":17},{"version":142,"cve_count":41,"kev_count":16,"has_kev":17},{"version":144,"cve_count":20,"kev_count":16,"has_kev":17},{"version":146,"cve_count":16,"kev_count":16,"has_kev":17},{"version":148,"cve_count":16,"kev_count":16,"has_kev":17},{"version":150,"cve_count":16,"kev_count":16,"has_kev":17},{"version":152,"cve_count":16,"kev_count":16,"has_kev":17},{"version":154,"cve_count":16,"kev_count":16,"has_kev":17},{"version":156,"cve_count":16,"kev_count":16,"has_kev":17},[228,236,241,248,253,258,264,269,274,279],{"cveId":229,"description":230,"publishedDate":231,"cvssScore":232,"cvssVersion":233,"severity":234,"isKev":4,"epssScore":235},"CVE-2023-2033","Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2023-04-14",8.8,"v3.1","High",0.40798,{"cveId":237,"description":238,"publishedDate":239,"cvssScore":232,"cvssVersion":233,"severity":234,"isKev":4,"epssScore":240},"CVE-2023-3079","Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2023-06-05",0.37858,{"cveId":242,"description":243,"publishedDate":244,"cvssScore":245,"cvssVersion":233,"severity":246,"isKev":17,"epssScore":247},"CVE-2020-24719","Exposed Erlang Cookie could lead to Remote Command Execution (RCE) attack. Communication between Erlang nodes is done by exchanging a shared secret (aka \"magic cookie\"). There are cases where the magic cookie is included in the content of the logs. An attacker can use the cookie to attach to an Erlang node and run OS level commands on the system running the Erlang node. Affects version: 6.5.1. Fix version: 6.6.0.","2020-11-12",9.8,"Critical",0.23304,{"cveId":249,"description":250,"publishedDate":251,"cvssScore":245,"cvssVersion":233,"severity":246,"isKev":17,"epssScore":252},"CVE-2020-9039","Couchbase Server 4.0.0, 4.1.0, 4.1.1, 4.5.0, 4.5.1, 4.6.0 through 4.6.5, 5.0.0, 5.1.1, 5.5.0 and 5.5.1 have Insecure Permissions for the projector and indexer REST endpoints (they allow unauthenticated access).The \u002Fsettings REST endpoint exposed by the projector process is an endpoint that administrators can use for various tasks such as updating configuration and collecting performance profiles. The endpoint was unauthenticated and has been updated to only allow authenticated users to access these administrative APIs.","2020-02-22",0.03939,{"cveId":254,"description":255,"publishedDate":256,"cvssScore":232,"cvssVersion":233,"severity":234,"isKev":4,"epssScore":257},"CVE-2024-0519","Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2024-01-16",0.03802,{"cveId":259,"description":260,"publishedDate":261,"cvssScore":232,"cvssVersion":262,"severity":234,"isKev":17,"epssScore":263},"CVE-2018-15728","Couchbase Server exposed the '\u002Fdiag\u002Feval' endpoint which by default is available on TCP\u002F8091 and\u002For TCP\u002F18091. Authenticated users that have 'Full Admin' role assigned could send arbitrary Erlang code to the 'diag\u002Feval' endpoint of the API and the code would subsequently be executed in the underlying operating system with privileges of the user which was used to start Couchbase. Affects Version: 4.0.0, 4.1.2, 4.5.1, 5.0.0, 4.6.5, 5.0.1, 5.1.1, 5.5.0, 5.5.1. Fix Version: 6.0.0, 5.5.2","2018-08-24","v3.0",0.02918,{"cveId":265,"description":266,"publishedDate":267,"cvssScore":245,"cvssVersion":233,"severity":246,"isKev":17,"epssScore":268},"CVE-2019-11495","In Couchbase Server 5.1.1, the cookie used for intra-node communication was not generated securely. Couchbase Server uses erlang:now() to seed the PRNG which results in a small search space for potential random seeds that could then be used to brute force the cookie and execute code against a remote system. This has been fixed in version 6.0.0.","2019-09-10",0.02139,{"cveId":270,"description":271,"publishedDate":267,"cvssScore":272,"cvssVersion":233,"severity":246,"isKev":17,"epssScore":273},"CVE-2019-11496","In versions of Couchbase Server prior to 5.0, the bucket named \"default\" was a special bucket that allowed read and write access without authentication. As part of 5.0, the behavior of all buckets including \"default\" were changed to only allow access by authenticated users with sufficient authorization. However, users were allowed unauthenticated and unauthorized access to the \"default\" bucket if the properties of this bucket were edited. This has been fixed in versions 5.1.0 and 5.5.0.",9.1,0.0141,{"cveId":275,"description":276,"publishedDate":277,"cvssScore":272,"cvssVersion":233,"severity":246,"isKev":17,"epssScore":278},"CVE-2022-32559","An issue was discovered in Couchbase Server before 7.0.4. Random HTTP requests lead to leaked metrics.","2022-06-14",0.01346,{"cveId":280,"description":281,"publishedDate":267,"cvssScore":282,"cvssVersion":233,"severity":234,"isKev":17,"epssScore":283},"CVE-2019-11467","In Couchbase Server 4.6.3 and 5.5.0, secondary indexing encodes the entries to be indexed using collatejson. When index entries contain certain characters like \\t, \u003C, >, it caused buffer overrun as encoded string would be much larger than accounted for, causing indexer service to crash and restart. This has been remedied in versions 5.1.2 and 5.5.2 to ensure buffer always grows as needed for any input.",7.5,0.01344,[285,290,295],{"cveId":254,"description":255,"publishedDate":256,"cvssScore":232,"severity":234,"isKev":4,"epssScore":257,"cisaVulnName":286,"cisaDateAdded":287,"cisaShortDescription":288,"cisaRequiredAction":289},"Google Chromium V8 Out-of-Bounds Memory Access Vulnerability","2024-01-17","Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":237,"description":238,"publishedDate":239,"cvssScore":232,"severity":234,"isKev":4,"epssScore":240,"cisaVulnName":291,"cisaDateAdded":292,"cisaShortDescription":293,"cisaRequiredAction":294},"Google Chromium V8 Type Confusion Vulnerability","2023-06-07","Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","Apply updates per vendor instructions.",{"cveId":229,"description":230,"publishedDate":231,"cvssScore":232,"severity":234,"isKev":4,"epssScore":235,"cisaVulnName":291,"cisaDateAdded":296,"cisaShortDescription":293,"cisaRequiredAction":294},"2023-04-17",{"title":298,"metaDescription":299,"keywords":300,"structuredData":301},"Couchbase Server by Couchbase - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Couchbase Server by Couchbase covering 68 versions with 63 tracked vulnerabilities including 0 critical and 3 high-severity issues and 3 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Couchbase Server vulnerabilities, Couchbase Server security, Couchbase Server CVE, Couchbase Couchbase Server, Couchbase Server threat intelligence, Couchbase security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Couchbase Server KEV, Couchbase Server exploited vulnerabilities",{"@context":302,"@type":303,"name":304,"description":299,"url":305,"manufacturer":306,"applicationCategory":310,"softwareVersion":311,"mainEntity":312},"https:\u002F\u002Fschema.org","SoftwareApplication","Couchbase Server","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcouchbase\u002Fcouchbase_server",{"@type":307,"name":308,"url":309},"Organization","Couchbase","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcouchbase","Security Software","68 versions tracked",{"@type":313,"name":314,"description":315,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Couchbase Server Security Vulnerabilities","Security vulnerabilities affecting Couchbase Server by Couchbase",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":317,"apiVersion":318},"2026-10-18T23:31:34.030Z","3.0",[320],{"product":321,"cves":20},"couchbase_server_java_sdk",{"rows":323,"total":11,"capped":17,"failed":16},[324,329,334],{"cveId":254,"name":286,"severity":234,"cvss":232,"added":287,"epss":257,"published":325,"ranges":326,"checked":4,"hits":328,"covers":17},"2024-01-16T22:15:37.753",[327],"before 7.2.5",[],{"cveId":237,"name":291,"severity":234,"cvss":232,"added":292,"epss":240,"published":330,"ranges":331,"checked":4,"hits":333,"covers":17},"2023-06-05T22:15:12.383",[332,125],"before 7.1.5",[],{"cveId":229,"name":291,"severity":234,"cvss":232,"added":296,"epss":235,"published":335,"ranges":336,"checked":4,"hits":337,"covers":17},"2023-04-14T19:15:09.453",[332,125],[]]