7
/ 10
HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:L/SA:L
Description
YugabyteDB diagnostic information was transmitted over HTTP, which could expose sensitive data during transmission
AI Analysis
YugabyteDB transmitted diagnostic information over an insecure HTTP connection, potentially exposing sensitive data during transmission.
Basic Information
ID
CVE-2025-8863
Source
Yugabyte
Published
Aug 11, 2025 at 13:03
Affected Product
Vendor
YugabyteDB Inc
Product
YugabyteDB
Version
2024.1.0
Affected Versions
YugabyteDB Inc YugabyteDB 2024.1.0
YugabyteDB Inc YugabyteDB 2.20.0.0
YugabyteDB Inc YugabyteDB 2.23.0.0
YugabyteDB Inc YugabyteDB 2.20.0.0
YugabyteDB Inc YugabyteDB 2.23.0.0
CWE Classification
AI Assessment
AI Severity
High
Vendor
YugabyteDB Inc
Product
YugabyteDB
Version
2024.1.0, 2.20.0.0, 2.23.0.0