The vulnerability of the JDBC driver pgjdbc for connecting Java programs to a PostgreSQL database lies in insufficient validation of input data. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

Pgjdbc driver flaws enable arbitrary file creation and weak input validation, risking integrity.

Reporter	Title	Published	Views	Family All 52
IBM Security Bulletins	Security Bulletin: InfoSphere Data Replication is affected by multiple postgresql vulnerbilities	29 Apr 202522:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	16 Jun 202315:20	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.8 addresses multiple security vulnerabilities.	11 Apr 202311:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 8.0.1	26 Mar 202502:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities addressed in Cloudera Base on premises Cloudera Runtime 7.3.1.700 SP3 CHF 2	9 Mar 202617:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Governance is vulnerable to arbitrary code execution, sensitive information exposure and unauthorized access due to PostgreSQL	15 Feb 202311:24	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in Postgresql shipped with IBM Tivoli Netcool Impact (CVE-2022-26520, CVE-2022-21724, 220313)	21 Sep 202219:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i Modernization Engine for Lifecycle Integration is vulnerable to multiple vulnerabilities	11 Jul 202216:00	–	ibm
ATTACKERKB	CVE-2022-26520	10 Mar 202217:47	–	attackerkb
AstraLinux	Astra Linux – Vulnerability in libpgjava	19 Jun 202611:10	–	astralinux

Vulners

Node

postgresql pgjdbcRange42.1.0–42.1.4

postgresql pgjdbcRange42.3.0–42.3.3

Source	Link
github	www.github.com/pgjdbc/pgjdbc/pull/2454/commits/017b929977b4f85795f9ad2fa5de6e80978b8ccc
github	www.github.com/pgjdbc/pgjdbc/security/advisories/GHSA-673j-qm5f-xpv8
jdbc	www.jdbc.postgresql.org/documentation/changelog.html
jdbc	www.jdbc.postgresql.org/documentation/head/tomcat.html
redos	www.redos.red-soft.ru/support/secure/
security-tracker	www.security-tracker.debian.org/tracker/CVE-2022-26520
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.6/
web	www.web.nvd.nist.gov/view/vuln/detail

06 Nov 2024 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 39.8

CVSS 210

EPSS0.02928