couchdb (SUSE:OpenStack Cloud 7) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:OpenStack Cloud 7 package couchdb, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2017-12636 — CVSS 7.2 (high): CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include paths for operating…
• CVE-2018-8007 — CVSS 7.2 (high): Apache CouchDB administrative users can configure the database server via HTTP(S). Due to insufficient validation of administrator-supplied…