Enterprisedb vulnerabilities

Products

• Postgres Advanced Server 10
• Pglogical 6
• Warehousepg 4

Newest

• enterprisedb warehousepg WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing... CVE-2026-104949 2.3 LowOctober 21, 2026
• enterprisedb warehousepg WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing... CVE-2026-104948 7.1 HighOctober 21, 2026
• enterprisedb warehousepg WarehousePG (WHPG) 7.2.1 through 7.6.0 is affected by a missing authorization vulnerability (CWE... CVE-2026-104947 5.3 MediumOctober 21, 2026
• enterprisedb barman Barman snapshot backup deletion trusts unverified backup catalog metadata CVE-2026-93853 Fix available 7.2 HighSeptember 29, 2026
• enterprisedb warehousepg WarehousePG pg_file_write/pg_file_rename/pg_file_unlink/pg_logdir_ls privilege escalation CVE-2026-96538 8.7 HighSeptember 28, 2026
• enterprisedb pglogical A use-after-free condition exists in pglogical's worker signaling code, where a worker structure... CVE-2026-50738 Fix available 7.7 HighJuly 28, 2026
• enterprisedb pglogical When applying replicated changes for a row that is missing one or more columns, pglogical... CVE-2026-50737 Fix available 9.0 CriticalJuly 28, 2026
• enterprisedb pglogical The pglogical queue mechanism, used to convey out-of-band commands such as replicated DDL from a... CVE-2026-50736 Fix available 9.0 CriticalJuly 28, 2026
• enterprisedb pglogical pglogical's apply worker does not sufficiently validate the length of certain fields in incoming... CVE-2026-50735 Fix available 6.1 MediumJuly 28, 2026
• enterprisedb postgres enterprise manager (pem), postgres enterprise manager +1 more PEM versions prior to 9.8.1 are affected by a stored Cross-site Scripting (XSS) vulnerability... CVE-2026-0949 6.5 MediumJanuary 16, 2026
• enterprisedb hybrid manager - innovation, hybrid manager - lts, hybrid manager +2 more EDB Hybrid Manager contains a flaw that allows an unauthenticated attacker to directly access... CVE-2025-14038 7.0 HighDecember 15, 2025
• enterprisedb bdr/pgd, pglogical +1 more When pglogical attempts to replicate data, it does not verify it is using a replication... CVE-2025-2506 5.3 MediumMay 22, 2025
• enterprisedb edb postgres advanced server EDB Postgres Advanced Server (EPAS) authenticated file read permissions bypass using edbldr CVE-2024-4545 7.7 HighMay 9, 2024
• enterprisedb postgres advanced server An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x... CVE-2023-41120 6.5 MediumDecember 12, 2023
• enterprisedb postgres advanced server An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x... CVE-2023-41119 8.8 HighDecember 12, 2023
• enterprisedb postgres advanced server An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x... CVE-2023-41118 8.8 HighDecember 12, 2023
• enterprisedb postgres advanced server An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x... CVE-2023-41117 8.8 HighDecember 12, 2023
• enterprisedb postgres advanced server An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x... CVE-2023-41116 4.3 MediumDecember 12, 2023
• enterprisedb postgres advanced server An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x... CVE-2023-41115 6.5 MediumDecember 12, 2023
• enterprisedb postgres advanced server An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x... CVE-2023-41114 6.5 MediumDecember 12, 2023
• enterprisedb postgres advanced server An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x... CVE-2023-41113 4.3 MediumDecember 12, 2023
• enterprisedb postgres advanced server EnterpriseDB EDB Postgres Advanced Server (EPAS) before 14.6.0 logs unredacted passwords in... CVE-2023-31043 7.5 HighApril 23, 2023
• 2ndquadrant pglogical A shell injection flaw was found in pglogical in versions before 2.3.4 and before 3.6.26. An... CVE-2021-3515 Fix available 6.7 MediumJune 1, 2021
• enterprisedb postgres advanced server EnterpriseDB Advanced Server 8.2 does not properly handle certain debugging function calls that... CVE-2007-4639 Public exploitFix available 6.5 MediumAugust 31, 2007