CVE Program partner

EDB

EnterpriseDB Corporation

API
CVEs, 365 days810 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationEnterpriseDB Corporation
RoleCNA
TypeVendor, Open Source
Reports tomitre
ScopeAll EnterpriseDB products and vulnerabilities identified in open source libraries used by EnterpriseDB products unless covered by another CNA’s scope.
Advisorieshttps://www.enterprisedb.com/docs/security/advisories/

Latest CVEs · RSS

  • CVE-2026-93853 2026-09-29 · CVSS 7.2
    Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots.
  • CVE-2026-96538 2026-09-28 · CVSS 8.7
    WarehousePG (WHPG) 7.x before 7.6.0-WHPG is affected by a missing authorization vulnerability (CWE-862) in the built-in server-side file functions pg_file_write
  • CVE-2026-50738 2026-07-28 · CVSS 7.7
    A use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be dereferenced after the underlying slot has been freed or
  • CVE-2026-50737 2026-07-28 · CVSS 9.0
    When applying replicated changes for a row that is missing one or more columns, pglogical evaluates the affected table's default expressions on the subscriber.
  • CVE-2026-50736 2026-07-28 · CVSS 9.0
    The pglogical queue mechanism, used to convey out-of-band commands such as replicated DDL from a publisher to a subscriber, executes message payloads on the sub
  • CVE-2026-50735 2026-07-28 · CVSS 6.1
    pglogical's apply worker does not sufficiently validate the length of certain fields in incoming replication protocol messages before copying them, resulting in
  • CVE-2026-0949 2026-01-16 · CVSS 6.5
    PEM versions prior to 9.8.1 are affected by a stored Cross-site Scripting (XSS) vulnerability that allows users with access to the Manage Charts menu to inject
  • CVE-2025-14038 2025-12-15 · CVSS 7.0
    EDB Hybrid Manager contains a flaw that allows an unauthenticated attacker to directly access certain gRPC endpoints. This could allow an attacker to read poten
  • CVE-2025-2506 2025-05-22 · CVSS 5.3
    When pglogical attempts to replicate data, it does not verify it is using a replication connection, which means a user with CONNECT access to a database configu
  • CVE-2024-4545 2024-05-09 · CVSS 7.7
    All versions of EnterpriseDB Postgres Advanced Server (EPAS) from 15.0 prior to 15.7.0 and from 16.0 prior to 16.3.0 may allow users using edbldr to bypass rol

All CVE Program partners