Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Yugabyte Subscribe
Filtered by product Yugabytedb Managed
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-0745 1 Yugabyte 1 Yugabytedb Managed 2023-02-16 N/A 9.8 CRITICAL
Relative Path Traversal vulnerability in YugaByte, Inc. Yugabyte Managed (PlatformReplicationManager.Java modules) allows Path Traversal. This vulnerability is associated with program files PlatformReplicationManager.Java. This issue affects Yugabyte Managed: from 2.0 through 2.13.
CVE-2023-0574 1 Yugabyte 1 Yugabytedb Managed 2023-02-16 N/A 9.8 CRITICAL
Server-Side Request Forgery (SSRF), Improperly Controlled Modification of Dynamically-Determined Object Attributes, Improper Restriction of Excessive Authentication Attempts vulnerability in YugaByte, Inc. Yugabyte Managed allows Accessing Functionality Not Properly Constrained by ACLs, Communication Channel Manipulation, Authentication Abuse.This issue affects Yugabyte Managed: from 2.0 through 2.13.