Yugabytedb
Approved changes feed: RSS · Atom
cpe:2.3:a:yugabytedb:yugabytedb:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Yugabytedb (e8027f32-0d6b-55b6-838a-0581aa7f0b3b) |
|---|---|
| Product | Yugabytedb (7f2709aa-ba3b-5381-a0e5-08447e039ff0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-6002 |
vulnerable | 2026-06-08 06:19:45.381700 |
Log Injection
MEDIUM (6.5)
YugabyteDB is vulnerable to cross site scripting (XSS) via log injection. Writing invalidated user input to log files can allow an unprivileged attacker to forge log entries or inject malicious content into the logs.
Published: 2023-11-07T23:56:50.729Z
Updated: 2024-09-17T13:03:18.141Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0575 |
vulnerable | 2026-06-08 05:52:31.948283 |
Remote Code Execution
HIGH (7.2)
External Control of Critical State Data, Improper Control of Generation of Code ('Code Injection') vulnerability in YugaByte, Inc. Yugabyte DB on Windows, Linux, MacOS, iOS (DevopsBase.Java:execCommand, TableManager.Java:runCommand modules) allows API Manipulation, Privilege Abuse. This vulnerability is associated with program files backup.Py.
This issue affects Yugabyte DB: Lesser then 2.2.0.0
Published: 2023-02-09T16:12:46.327Z
Updated: 2025-03-24T18:34:16.202Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.