PJ
Product
Postgresql Jdbc Driver
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 4Medium 3Low 0
Watch
Add Postgresql Jdbc Driver to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-1597 | 9.8 | Feb 19 | pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE Affected: before 42.2.28; 42.3.0 before 42.3.9; 42.4.0 before 42.4.4; 42.5.0 before 42.5.5; 42.6.0 before 42.6.1; 42.7.0 before 42.7.2 |
| CVE-2022-26520 | 9.8 | Mar 10 | In pgjdbc before 42.3.3, an attacker (who controls the jdbc URL or properties) can call java.util.logging.FileHandler to write to arbitrary files through the loggerFile and… Affected: 42.1.0 through 42.1.4; 42.3.0 before 42.3.3 |
| CVE-2022-21724 | 9.8 | Feb 2 | pgjdbc is the offical PostgreSQL JDBC Driver Affected: before 42.2.25; 42.3.0 before 42.3.2; 42.3.2 |
| CVE-2018-10936 | 8.1 | Aug 30 | A weakness was found in postgresql-jdbc before version 42.2.5 Affected: before 42.2.5 |
| CVE-2022-31197 | 8.0 | Aug 3 | SQL Injection in ResultSet.refreshRow() with malicious column names in pgjdbc Affected: before 42.2.26; 42.3.0 before 42.3.7; 42.4.0; 42.4.0; 42.4.1 |
| CVE-2020-13692 | 7.7 | Jun 4 | PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE Affected: before 42.2.13 |
| CVE-2026-42198 | 7.5 | Apr 29 | pgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoS Affected: 42.2.0 before 42.7.11 |
| CVE-2026-54291 | 5.9 | Jul 6 | Silent channel-binding authentication downgrade via unsupported certificate algorithms Affected: 42.7.4 before 42.7.12 |
| CVE-2025-49146 | 5.9 | Jun 11 | pgjdbc is an open source postgresql JDBC Driver Affected: 42.7.4 before 42.7.7 |
| CVE-2022-41946 | 5.5 | Nov 23 | pgjdbc is an open source postgresql JDBC Driver Affected: 42.2.0 before 42.2.27; 42.3.0 before 42.3.8; 42.4.0 before 42.4.3; 42.5.0; 42.5.0 |
| CVE-2012-1618 | – | Oct 6 | Interaction error in the PostgreSQL JDBC driver before 8.2, when used with a PostgreSQL server with the "standard_conforming_strings" option enabled, such as the default… Affected: 8.1 |
Showing 11