Read the docs

EnterpriseDB

Records23All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

EnterpriseDB records in CISA KEV

No EnterpriseDB vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Postgres Advanced Server 10 records MEDIUM Pglogical 4 records MEDIUM Hybrid Manager 1 record LOW Postgres Enterprise Manager 1 record LOW

Records

1 record in Postgres Enterprise Manager · all components

TI-2026-00717 CVE-2026-0949 · GHSA-hv88-4696-6v9q

Cross-site scripting in EnterpriseDB Postgres Enterprise Manager

Priority LOW 28

PEM versions prior to 9.8.1 are affected by a stored Cross-site Scripting (XSS) vulnerability that allows users with access to the Manage Charts menu to inject arbitrary JavaScript when creating a new chart, which is the…

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00228 Published 2026-01-16 Fixed in 9.8.1 CWE-79
Open these records in search →