Skip to content

Couchbase · weakness class

Denial of Service

6 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

  1. An issue was discovered in Couchbase Server before 7.0.4. Random HTTP requests lead to leaked metrics.CVE-2022-32559Couchbase · 1.4% likely

    CWE-770

  2. In Couchbase Server 6.0.3 and Couchbase Sync Gateway through 2.7.0, the Cluster management, views, query, and full-text search endpoints are vulnerable to the Slowloris denial-of-…CVE-2020-9041Couchbase · 1.3% likely

    CWE-404

  3. An issue was discovered in Couchbase Server 7.x before 7.0.5 and 7.1.x before 7.1.2. A crafted HTTP REST request from an administrator account to the Couchbase Server Backup Servi…CVE-2022-42950Couchbase · CVSS 4.9 · 1.0% likely

    CWE-400

  4. An issue was discovered in Couchbase Server 6.6.x through 7.2.0, before 7.1.5 and 7.2.1. Unauthenticated users may cause memcached to run out of memory via large commands.CVE-2023-43768Couchbase · CVSS 7.5 · 0.9% likely

    CWE-770

  5. An issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of service (outage of reader threads).CVE-2023-45874Couchbase · CVSS 4.3 · 0.8% likely

    CWE-400

  6. An issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of service (application exist) because of the OOM killer.CVE-2023-45873Couchbase · CVSS 6.5 · 0.7% likely

    CWE-770

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.