Read the docs

PostgreSQL

Records229All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical15CVSS 9.0–10.0
CVSS high101CVSS 7.0–8.9

Exploited now

PostgreSQL records in CISA KEV

No PostgreSQL vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Postgresql 203 records HIGH Postgresql Jdbc Driver 11 records HIGH Postgresql-common 1 record LOW

Records

1 record in Postgresql-common · all components

TI-2019-02594 CVE-2019-3466 · GHSA-rhrq-jx2f-79g7

Improper privilege management in postgresql-common

Priority LOW 35

The pg_ctlcluster script in postgresql-common in versions prior to 210 didn't drop privileges when creating socket/statistics temporary directories, which could result in local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00499 Published 2019-11-20 Fixed in 210 CWE-269
Open these records in search →