TI-2024-01491 CVE-2024-1597 · GHSA-24rp-q3w6-vc56
pgjdbc SQL Injection via line comment generation
Priority HIGH 82
pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE.
PostgreSQL
Records229All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical15CVSS 9.0–10.0
CVSS high101CVSS 7.0–8.9
Exploited now
PostgreSQL records in CISA KEVNo PostgreSQL vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
11 records in Postgresql Jdbc Driver · all components
TI-2022-06097 CVE-2022-21724 · GHSA-v7wg-cpwc-24m4
Unchecked Class Instantiation when providing Plugin Classes
Priority HIGH 76
pgjdbc is the offical PostgreSQL JDBC Driver.
TI-2022-13237 CVE-2022-31197 · GHSA-r38f-c4h4-hqq2
SQL Injection in ResultSet.refreshRow() with malicious column names in pgjdbc
Priority HIGH 70
PostgreSQL JDBC Driver (PgJDBC for short) allows Java programs to connect to a PostgreSQL database using standard, database independent Java code.
TI-2022-09860 CVE-2022-26520 · GHSA-727h-hrw8-jg8q
In pgjdbc before 42.3.3, an attacker (who controls the jdbc URL or properties) can call…
Priority MEDIUM 48
In pgjdbc before 42.3.3, an attacker (who controls the jdbc URL or properties) can call java.util.logging.FileHandler to write to arbitrary files through the loggerFile and loggerLevel connection properties.
TI-2026-30519 CVE-2026-42198 · GHSA-98qh-xjc8-98pq
pgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoS
Priority MEDIUM 45
pgjdbc is an open source postgresql JDBC Driver.
TI-2025-31226 CVE-2025-49146 · GHSA-hq9p-pm7w-8p54
pgjdbc Client Allows Fallback to Insecure Authentication Despite channelBinding=require Configuration
Priority MEDIUM 42
pgjdbc is an open source postgresql JDBC Driver.
TI-2020-10739 CVE-2020-13692 · GHSA-88cc-g835-76rp
PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE.
Priority MEDIUM 41
PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE.
TI-2018-07748 CVE-2018-10936 · GHSA-568q-9fw5-28wf
A weakness was found in postgresql-jdbc before version 42.2.5.
Priority MEDIUM 41
A weakness was found in postgresql-jdbc before version 42.2.5.
TI-2012-01408 CVE-2012-1618 · GHSA-h86w-m5rm-xr33
Interaction error in the PostgreSQL JDBC driver before 8.2, when used with a PostgreSQL…
Priority LOW 38
Interaction error in the PostgreSQL JDBC driver before 8.2, when used with a PostgreSQL server with the "standard_conforming_strings" option enabled, such as the default configuration of PostgreSQL 9.1, does not properly…
TI-2026-39191 CVE-2026-54291 · GHSA-j92g-9f8w-j867
Silent channel-binding authentication downgrade via unsupported certificate algorithms
Priority LOW 35
pgjdbc is an open source postgresql JDBC Driver.
TI-2022-20287 CVE-2022-41946 · GHSA-562r-vg33-8x8h
TemporaryFolder on unix-like systems does not limit access to created files in pgjdbc
Priority LOW 26
pgjdbc is an open source postgresql JDBC Driver.