PT-2020-6672 · Postgresql +9 · Postgresql Jdbc Driver +9

🗓️ 01 Jun 2020 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 2 Views

PostgreSQL JDBC Driver before 42.2.13 is vulnerable to XXE; upgrade to 42.2.13+ or restrict entities.

Reporter	Title	Published	Views	Family All 265
IBM Security Bulletins	Security Bulletin: InfoSphere Data Replication is affected by multiple postgresql vulnerbilities	29 Apr 202522:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	16 Jun 202315:20	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.8 addresses multiple security vulnerabilities.	11 Apr 202311:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 8.0.1	26 Mar 202502:36	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been fixed in the IBM Security Access Manager and IBM Security Verify Access products	14 Oct 202016:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities addressed in Cloudera Base on premises Cloudera Runtime 7.3.1.700 SP3 CHF 2	9 Mar 202617:19	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in jackson-databind affects IBM watsonx.data	18 Sep 202419:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Disconnected Log Collector is vulnerable to using components with known vulnerabilities	29 Sep 202318:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to security vulnerabilities (CVE-2018-1058, CVE-2018-10936, CVE-2019-9193)	27 May 202008:42	–	ibm
IBM Security Bulletins	Security Bulletin: PostgresSQL JDBC Driver as used in IBM QRadar SIEM is vulnerable to information disclosure (CVE-2020-13692)	15 Dec 202017:05	–	ibm

Source	Link
github	www.github.com/pgjdbc/pgjdbc/commit/14b62aca4764d496813f55a43d050b017e01eb65
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
security-tracker	www.security-tracker.debian.org/tracker/CVE-2020-13692
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
osv	www.osv.dev/vulnerability/CVE-2020-13692
errata	www.errata.altlinux.org/ALT-PU-2023-8463
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCCAPM6FSNOC272DLSNQ6YHXS3OMHGJC
ubuntu	www.ubuntu.com/security/CVE-2020-13692
osv	www.osv.dev/vulnerability/RLSA-2020:3176

06 Mar 2024 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 27.5 - 9

CVSS 38.1

CVSS 3.17 - 9.8

EPSS0.04094

SSVC