- How many CVEs does YugabyteDB have?
- YugabyteDB has 17 published CVE records since 2023, including 6 in the last two years.
- How many YugabyteDB CVEs are in CISA KEV?
- None of YugabyteDB's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
- Which YugabyteDB products have the most CVEs?
- The YugabyteDB products with the most published CVEs are YugabyteDB Anywhere, YugabyteDB, Anywhere, YCQL tablet server, yugaware.
- What are the most common weakness types in YugabyteDB CVEs?
- YugabyteDB's CVEs most often map to these CWE weakness types: CWE-532 (Insertion of Sensitive Information into Log File), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-23 (Relative Path Traversal), CWE-269 (Improper Privilege Management).
- Are there public exploits for YugabyteDB vulnerabilities?
- No YugabyteDB CVEs currently have a tracked public exploit in this dataset.
- How many critical YugabyteDB vulnerabilities are there?
- YugabyteDB has 3 critical and 4 high-severity CVEs.
- What is the average severity of YugabyteDB CVEs?
- The average CVSS base score across YugabyteDB's scored CVEs is 6.6.