Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache CouchDB

16 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-24706 Exploited Public exploit EPSS 93%

    Remote Code Execution Vulnerability in Packaging

    In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including re…

    Apache Software Foundation Apache CouchDB
    KEV Aug 25, 2022
  • Unscored —
    CVE-2021-38295 Public exploit

    Privilege escalation vulnerability when using HTML attachments

    In Apache CouchDB, a malicious user with permission to create documents in a database is able to attach a HTML attachment to a document. If a CouchDB admin opens that attachment in a browser, e.g. via the CouchDB admin interface Fauxton, any JavaScript code e…

    Apache Software Foundation Apache CouchDB IBM Cloudant couchdb Ubuntu
  • Unscored —
    CVE-2016-8742 Public exploit

    The Windows installer that the Apache CouchDB team provides was vulnerable to local privilege escalation. All files in …

    Apache Software Foundation Apache CouchDB
  • Unscored —
    CVE-2017-12636 Public exploit EPSS 91%

    CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include p…

    Apache Software Foundation Apache CouchDB couchdb Ubuntu
  • Unscored —
    CVE-2017-12635 Public exploit EPSS 100%

    Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB b…

    Apache Software Foundation Apache CouchDB couchdb Ubuntu