Postgres Advanced Server Security Vulnerabilities and Issues — Postgres Advanced Server CVE List

Lucene search

EnterprisedbPostgres Advanced Server

4 matches found

CVE•added 2007/08/31 11:17 p.m.•46 views

CVE-2007-4639

EnterpriseDB Advanced Server 8.2 does not properly handle certain debugging function calls that occur before a call to pldbg_create_listener, which allows remote authenticated users to cause a denial of service (daemon crash) and possibly execute arbitrary code via a SELECT statement that invokes a...

6.5CVSS7.5AI score0.15179EPSS

CVE•added 2023/12/12 7:15 a.m.•24 views

CVE-2023-41120

An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It permits an authenticated user to use DBMS_PROFILER to remove all accumulated profiling data on a system-wide basis, reg...

6.5CVSS6.3AI score0.00046EPSS

CVE•added 2023/12/12 7:15 a.m.•22 views

CVE-2023-41114

An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It contains the functions get_url_as_text and get_url_as_bytea that are publicly executable, thus permitting an authentica...

6.5CVSS6.3AI score0.00123EPSS

CVE•added 2023/12/12 7:15 a.m.•21 views

CVE-2023-41115

An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. When using UTL_ENCODE, an authenticated user can read any large object, regardless of that user's permissions.

6.5CVSS6.3AI score0.00205EPSS