products / couchbase
Couchbase Server
Couchbase Server is a distributed document database with search and analytics features. NVD uses couchbase:couchbase_server with dotted product versions aligned to Couchbase release numbering.
api usage
Querying Couchbase Server
product slug
couchbaseversion format
7.0.4, 7.2.1bash
curl "https://api.attestd.io/v1/check?product=couchbase&version=7.0.4" \
-H "Authorization: Bearer $ATTESTD_KEY"Spot-check CVE-2022-42966 (RCE class issue in Couchbase services).
json
{
"product": "couchbase",
"version": "7.0.4",
"supported": true,
"risk_state": "critical",
"risk_factors": [
"active_exploitation",
"remote_code_execution",
"no_authentication_required",
"internet_exposed_service",
"patch_available"
],
"actively_exploited": true,
"remote_exploitable": true,
"authentication_required": false,
"patch_available": true,
"fixed_version": "7.2.7",
"confidence": 0.2,
"cve_ids": [
"CVE-2021-33504",
"CVE-2022-32556",
"CVE-2022-32562",
"CVE-2022-32565",
"CVE-2022-42950",
"CVE-2022-42951",
"CVE-2023-2033",
"CVE-2023-25016",
"CVE-2023-28470",
"CVE-2023-3079",
"CVE-2023-36667",
"CVE-2023-43768",
"CVE-2023-43769",
"CVE-2023-45873",
"CVE-2023-45874",
"CVE-2023-49338",
"CVE-2023-49931",
"CVE-2023-49932",
"CVE-2023-50437",
"CVE-2024-0519",
"CVE-2024-23302",
"CVE-2024-25673",
"CVE-2024-37034",
"CVE-2025-46619"
],
"cves": null,
"max_epss": 0.40798,
"last_updated": "2026-08-16T11:18:08.825063Z",
"supply_chain": {
"compromised": false,
"sources": [],
"malware_type": null,
"description": null,
"advisory_url": null,
"compromised_at": null,
"removed_at": null,
"source_published_at": null,
"observed_at": null,
"ingested_at": null,
"first_served_at": null,
"provenance": null
},
"supply_chain_monitored": true,
"typosquat": null
}cleaner line
Newer release
bash
curl "https://api.attestd.io/v1/check?product=couchbase&version=7.6.4" \
-H "Authorization: Bearer $ATTESTD_KEY"notable cves
CVE history
| CVE | Description | Affects | CVSS |
|---|---|---|---|
CVE-2022-42966 | Unauthenticated RCE via Couchbase service exposure. | 7.0.x (see NVD) | 10.0 |
CVE-2021-33025 | Privilege escalation in Couchbase Server admin paths. | 6.5, 7.0 | 8.8 |
CVE-2020-9047 | Cross-site scripting in Couchbase admin UI. | 6.0, 6.5 | 6.1 |
CVE-2018-15728 | Information disclosure via REST API defaults. | 5.x | 7.5 |
CVE-2023-28822 | Couchbase security update (verify NVD ranges). | see NVD | 7.0 |
related