PT-2024-1805

🗓️ 19 Feb 2024 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

PostgreSQL JDBC Driver has SQL injection vulnerability; upgrade pgjdbc versions to mitigate risks.

Reporter	Title	Published	Views	Family All 171
IBM Security Bulletins	Security Bulletin: An IBM QRadar SIEM JDBC protocol is vulnerable to SQL injection (CVE-2024-1597)	15 May 202408:37	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of Postgresql JDBC, IBM Instana Observability is vulnerable to SQL injection.	17 Apr 202413:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in postgresql-42.3.2.jar	30 Apr 202417:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to SQL injection in PostgreSQL JDBC Driver [CVE-2024-1597]	25 Apr 202417:46	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	10 Apr 202409:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in postgresql-42.5.1.jar	8 Jul 202506:25	–	ibm
IBM Security Bulletins	Security Bulletin: InfoSphere Data Replication is affected by postgresql vulnerbility	10 Mar 202520:12	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insights 1.6.12 addresses multiple security vulnerabilities.	2 Apr 202411:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics Certified Containers is affected by security vulnerabilities	7 Nov 202519:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Disconnected Log Collector includes components with known vulnerabilities	11 Apr 202421:04	–	ibm

Source	Link
errata	www.errata.almalinux.org/9/ALSA-2024-1436.html
security-tracker	www.security-tracker.debian.org/tracker/CVE-2024-1597
osv	www.osv.dev/vulnerability/DEBIAN-CVE-2024-1597
errata	www.errata.rockylinux.org/RLSA-2024:1436
enterprisedb	www.enterprisedb.com/docs/security/assessments/cve-2024-1597
osv	www.osv.dev/vulnerability/GHSA-24rp-q3w6-vc56
osv	www.osv.dev/vulnerability/DLA-3812-1
t	www.t.me/pentestingnews/43835
osv	www.osv.dev/vulnerability/SUSE-SU-2024:0771-1
osv	www.osv.dev/vulnerability/SUSE-SU-2024:0769-1

17 Jan 2026 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 210

CVSS 3.19.8 - 10

EPSS0.0035

SSVC