Read the docs

EnterpriseDB

Records23All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

EnterpriseDB records in CISA KEV

No EnterpriseDB vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Postgres Advanced Server 10 records MEDIUM Pglogical 4 records MEDIUM Hybrid Manager 1 record LOW Postgres Enterprise Manager 1 record LOW

Records

1 record in Hybrid Manager · all components

TI-2025-12827 CVE-2025-14038 · GHSA-w5qr-6fc8-x8j9

Missing authentication in EnterpriseDB Hybrid Manager - LTS

Priority LOW 30

EDB Hybrid Manager contains a flaw that allows an unauthenticated attacker to directly access certain gRPC endpoints.

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.00232 Published 2025-12-15 Fixed in 1.3.3, 2025.12 CWE-306
Open these records in search →