Sploitus

10 exploited vulnerabilities in Apache Couchdb

Vulnerabilities with publicly known exploits

Vendors
Apache, Ibm, Mochiweb
With known exploits
10
Affected Apache Couchdb versions
< 3.2.2, 1.7.0, 2.0.0, 1.7.1, 2.1.1, 3.1.2, 1.5.0

Vulnerabilities with exploits

Highest CVSS first — 7 of these already have exploit code on Sploitus

CVE-2022-24706 8 exploits
CVSS 10.0 CRITICAL 2022-04-26FIX AVAILABLE
Exploit for Insecure Default Initialization of Resource in Apache CouchdbApache CouchDB Erlang Remote Code Execution
CVE-2017-12635 21 exploits
CVSS 10.0 CRITICAL 2017-11-14FIX AVAILABLE
Exploit for Improper Privilege Management in Apache CouchdbCouchDB Enum Utility
CVE-2018-8007 2 exploits
CVSS 9.0 HIGH 2018-07-11FIX AVAILABLE
Couchbase Server Remote Code Execution VulnerabilityCouchbase Server Remote Code Execution
CVE-2017-12636 15 exploits
CVSS 9.0 HIGH 2017-11-14FIX AVAILABLE
Exploit for Improper Privilege Management in Apache CouchdbExploit for Unrestricted Upload of File with Dangerous Type in Apache Tomcat
CVE-2016-8742 1 exploit
CVSS 7.8 HIGH 2018-02-12FIX AVAILABLE
Apache CouchDB 2.0.0 - Local Privilege Escalation
CVE-2021-38295 1 exploit
CVSS 7.3 HIGH 2021-10-14FIX AVAILABLE
Exploit for Cross-site Scripting in Apache Couchdb
CVE-2023-45725
CVSS 5.7 MEDIUM 2023-12-05FIX AVAILABLE
CVE-2014-2668 1 exploit
CVSS 5.0 MEDIUM 2014-03-28FIX AVAILABLE
Apache CouchDB 1.5.0 - 'uuids' Denial of Service
CVE-2012-5641
CVSS 5.0 MEDIUM 2014-03-18FIX AVAILABLE
CVE-2023-26268
CVSS 4.4 MEDIUM 2023-05-02FIX AVAILABLE