PatchTheCVEcouchbase vulnerabilities
Recent CVEs affecting couchbase products. 17 tracked.
couchbase has 17 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 17. Most recent: 2025-07-29. Highest priority: CVE-2023-49931 (score 54/100).
- CVE-2025-52490 HIGH 7.3 UPGRADE An issue was discovered in Couchbase Sync Gateway before 3.2.6
- CVE-2025-49015 MEDIUM 4.9 UPGRADE The Couchbase .NET SDK (client library) before 3.7.1 does not properly enable hostname verification for TLS ce
- CVE-2025-46619 HIGH 7.6 UPGRADE A security issue has been discovered in Couchbase Server before 7.6.4 and fixed in v.7.6.4 and v.7.2.7 for Win
- CVE-2024-56178 MEDIUM 6.5 UPGRADE An issue was discovered in Couchbase Server 7.6.x through 7.6.3
- CVE-2024-37034 MEDIUM 5.9 UPGRADE An issue was discovered in Couchbase Server before 7.2.5 and 7.6.0 before 7.6.1
- CVE-2024-25673 MEDIUM 6.1 UPGRADE Couchbase Server 7.6.x before 7.6.2, 7.2.x before 7.2.6, and all earlier versions allows HTTP Host header inje
- CVE-2024-23302 HIGH 7.5 UPGRADE Couchbase Server before 7.2.4 has a private key leak in goxdcr.log.
- CVE-2023-50437 HIGH 8.6 UPGRADE An issue was discovered in Couchbase Server before 7.2.x before 7.2.4
- CVE-2023-50436 MEDIUM 5.3 UPGRADE An issue was discovered in Couchbase Server before 7.2.4
- CVE-2023-49932 MEDIUM 5.4 UPGRADE An issue was discovered in Couchbase Server before 7.2.4
- CVE-2023-49931 CRITICAL 9.8 UPGRADE An issue was discovered in Couchbase Server before 7.2.4
- CVE-2023-49930 CRITICAL 9.8 UPGRADE An issue was discovered in Couchbase Server before 7.2.4
- CVE-2023-49338 HIGH 7.5 UPGRADE Couchbase Server 7.1.x and 7.2.x before 7.2.4 does not require authentication for the /admin/stats and /admin/
- CVE-2023-45874 MEDIUM 4.3 UPGRADE An issue was discovered in Couchbase Server through 7.2.2
- CVE-2023-45873 MEDIUM 6.5 UPGRADE An issue was discovered in Couchbase Server through 7.2.2
- CVE-2023-43769 MEDIUM 6.3 UPGRADE An issue was discovered in Couchbase Server through 7.1.4 before 7.1.5 and before 7.2.1
- CVE-2023-43768 HIGH 7.5 UPGRADE An issue was discovered in Couchbase Server 6.6.x through 7.2.0, before 7.1.5 and 7.2.1
FAQ
How do I fix couchbase vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is couchbase being exploited right now?
None of the tracked couchbase CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which couchbase CVE should I patch first?
CVE-2023-49931 currently ranks highest (54/100): An issue was discovered in Couchbase Server before 7.2.4.