Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

couchbase / sync_gateway CVEs

Beta · best-effort

5 CVEs tagged to couchbase / sync_gateway — 2 Critical, 3 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to couchbase vendor archive

CVE-2025-52490

Published Jul 29, 2025

An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollect_info_options.log and sync_gateway.log, there are cleartext passwords in redacted and unredacted output.

CVSS 7.3 · High

Vendor/product tagsBeta · best-effort

CVE-2022-32563

Published Jun 10, 2022

An issue was discovered in Couchbase Sync Gateway 3.x before 3.0.2. Admin credentials are not verified when using X.509 client-certificate authentication from Sync Gateway to Couc…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2021-43963

Published Dec 7, 2021

An issue was discovered in Couchbase Sync Gateway 2.7.0 through 2.8.2. The bucket credentials used to read and write data in Couchbase Server were insecurely being stored in the m…

CVSS 8.1 · High

Vendor/product tagsBeta · best-effort

CVE-2020-9041

Published Jun 8, 2020

In Couchbase Server 6.0.3 and Couchbase Sync Gateway through 2.7.0, the Cluster management, views, query, and full-text search endpoints are vulnerable to the Slowloris denial-of-…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2019-9039

Published Jun 26, 2019

In Couchbase Sync Gateway 2.1.2, an attacker with access to the Sync Gateway’s public REST API was able to issue additional N1QL statements and extract sensitive data or call arbi…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1