EnterpriseDB

Records23All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

EnterpriseDB records in CISA KEV

No EnterpriseDB vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Postgres Advanced Server 10 records MEDIUM Pglogical 4 records MEDIUM Hybrid Manager 1 record LOW Postgres Enterprise Manager 1 record LOW

Records

10 records in Postgres Advanced Server · all components

TI-2023-21738 CVE-2023-41117 · GHSA-x9qc-m3q8-9g77

An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32…

MEDIUM 44

An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00759 Published 2023-12-12 No fix listed CWE-427

TI-2023-21739 CVE-2023-41118 · GHSA-75qc-j87q-6gh5

An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32…

MEDIUM 41

An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00772 Published 2023-12-12 No fix listed

TI-2023-21740 CVE-2023-41119 · GHSA-jrqw-cwpm-3q7j

An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32…

LOW 39

An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00625 Published 2023-12-12 No fix listed CWE-269

TI-2023-14779 CVE-2023-31043 · GHSA-8wm5-mg2w-7cq3

EnterpriseDB EDB Postgres Advanced Server (EPAS) before 14.6.0 logs unredacted passwords…

LOW 39

EnterpriseDB EDB Postgres Advanced Server (EPAS) before 14.6.0 logs unredacted passwords in situations where optional parameters are used with CREATE/ALTER USER/GROUP/ROLE, and redacting was configured with edb_filter_lo…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0043 Published 2023-04-23 No fix listed CWE-521

TI-2007-04491 CVE-2007-4639 · GHSA-f4fh-29cp-vmcg

EnterpriseDB Advanced Server 8.2 does not properly handle certain debugging function…

LOW 37

EnterpriseDB Advanced Server 8.2 does not properly handle certain debugging function calls that occur before a call to pldbg_create_listener, which allows remote authenticated users to cause a denial of service (daemon c…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.05128 Published 2007-08-31 Fixed CWE-824

TI-2023-21736 CVE-2023-41115 · GHSA-3cp6-5m44-6hcm

An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32…

LOW 30

An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00589 Published 2023-12-12 No fix listed

TI-2023-21735 CVE-2023-41114 · GHSA-p33q-26cg-jw36

An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32…

LOW 30

An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00589 Published 2023-12-12 No fix listed

TI-2023-21741 CVE-2023-41120 · GHSA-47p2-p2p7-c22c

An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32…

LOW 29

An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00526 Published 2023-12-12 No fix listed CWE-668

TI-2023-21734 CVE-2023-41113 · GHSA-94q2-6rf3-frvc

An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32…

LOW 21

An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00474 Published 2023-12-12 No fix listed

TI-2023-21737 CVE-2023-41116 · GHSA-g2cw-p5wq-3jh2

An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32…

LOW 20

An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00446 Published 2023-12-12 No fix listed

Open these records in search →

Critical	3
High	9
Medium	10
Low	1
No CVSS	0