Duplicate Advisory: SQL injection in pgjdbc

🗓️ 19 Feb 2024 15:30:38Reported by GitHub Advisory DatabaseType

Withdrawn duplicate advisory for SQL injection in pgjdbc, affect versions before 42.7.2

Reporter	Title	Published	Views	Family All 171
IBM Security Bulletins	Security Bulletin: An IBM QRadar SIEM JDBC protocol is vulnerable to SQL injection (CVE-2024-1597)	15 May 202408:37	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of Postgresql JDBC, IBM Instana Observability is vulnerable to SQL injection.	17 Apr 202413:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in postgresql-42.3.2.jar	30 Apr 202417:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to SQL injection in PostgreSQL JDBC Driver [CVE-2024-1597]	25 Apr 202417:46	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	10 Apr 202409:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in postgresql-42.5.1.jar	8 Jul 202506:25	–	ibm
IBM Security Bulletins	Security Bulletin: InfoSphere Data Replication is affected by postgresql vulnerbility	10 Mar 202520:12	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insights 1.6.12 addresses multiple security vulnerabilities.	2 Apr 202411:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics Certified Containers is affected by security vulnerabilities	7 Nov 202519:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Disconnected Log Collector includes components with known vulnerabilities	11 Apr 202421:04	–	ibm

Vulners

Node

org.postgresql postgresqlRange<42.2.8maven

org.postgresql postgresqlRange42.3.0–42.3.9maven

org.postgresql postgresqlRange42.4.0–42.4.4maven

org.postgresql postgresqlRange42.5.0–42.5.5maven

org.postgresql postgresqlRange42.6.0–42.6.1maven

org.postgresql postgresqlRange42.7.0–42.7.2maven

Source	Link
github	www.github.com/pgjdbc/pgjdbc/security/advisories/GHSA-24rp-q3w6-vc56
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-1597
github	www.github.com/pgjdbc/pgjdbc/commit/06abfb78a627277a580d4df825f210e96a4e14ee
github	www.github.com/pgjdbc/pgjdbc/commit/93b0fcb2711d9c1e3a2a03134369738a02a58b40
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/TZQTSMESZD2RJ5XBPSXH3TIQVUW5DIUU
security	www.security.netapp.com/advisory/ntap-20240419-0008
enterprisedb	www.enterprisedb.com/docs/jdbc_connector/latest/01_jdbc_rel_notes
enterprisedb	www.enterprisedb.com/docs/security/assessments/cve-2024-1597
openwall	www.openwall.com/lists/oss-security/2024/04/02/6
lists	www.lists.debian.org/debian-lts-announce/2024/05/msg00007.html

20 Mar 2026 05:03Current

10High risk

Vulners AI Score10

CVSS 3.19.8 - 10

EPSS0.0035

SSVC

CWE-89