CVE-2025-8863CWE-319

YugabyteDB diagnostic information was transmitted over HTTP, which could expose sensitive data during transmission

High · published August 11, 2025

CVSS v4.0
7.0
EPSS
0%
Percentile
13.6
In the wild
Unconfirmed
What it is

YugabyteDB diagnostic information was transmitted over HTTP, which could expose sensitive data during transmission

The record
Technical detail
CVSS v4.0
7.0 · HIGH
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:L/SA:L
EPSS
0.00235 · 13.6th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2025-08-11T13:03Z
EPSS history
Timeline
  • 11 AUG 13:03Z
    YugabyteDB diagnostic information was transmitted over HTTP, which could expose sensitive data during transmission
    cvelistv5