EN
Vendor
Enterprisedb
21
CVEs
0
On KEV
5
New 30D
Products
WA8.7
WarehousePG
EnterpriseDB
4 CVEs0 on KEV4 new
BA7.2
Barman
EnterpriseDB
1 CVEs0 on KEV1 new
PA9.8
Postgres Advanced Server
Enterprisedb
10 CVEs0 on KEV0 new
PG7.5
pglogical
EnterpriseDB
4 CVEs0 on KEV0 new
HM7.0
Hybrid Manager
Enterprisedb
1 CVEs0 on KEV0 new
PE4.8
Postgres Enterprise Manager
Enterprisedb
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-104949 New | WA WarehousePG EnterpriseDB | 2.3 | Oct 21 | WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in gp_add_coordinator_standby() |
| CVE-2026-104948 New | WA WarehousePG EnterpriseDB | 7.1 | Oct 21 | WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in the built-in cluster expansion functions… |
| CVE-2026-104947 New | WA WarehousePG EnterpriseDB | 5.3 | Oct 21 | WarehousePG (WHPG) 7.2.1 through 7.6.0 is affected by a missing authorization vulnerability (CWE-862) in the built-in function gp_log_backend_memory_contexts() |
| CVE-2026-93853 | BA Barman EnterpriseDB | 7.2 | Sep 29 | Barman snapshot backup deletion trusts unverified backup catalog metadata |
| CVE-2026-96538 | WA WarehousePG EnterpriseDB | 8.7 | Sep 28 | WarehousePG pg_file_write/pg_file_rename/pg_file_unlink/pg_logdir_ls privilege escalation |
| CVE-2026-50738 | PG pglogical EnterpriseDB | 5.3 | Jul 28 | A use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be dereferenced after the underlying slot has been freed or recycled during… |
| CVE-2026-50737 | PG pglogical EnterpriseDB | 7.5 | Jul 28 | When applying replicated changes for a row that is missing one or more columns, pglogical evaluates the affected table's default expressions on the subscriber |
| CVE-2026-50736 | PG pglogical EnterpriseDB | 7.5 | Jul 28 | The pglogical queue mechanism, used to convey out-of-band commands such as replicated DDL from a publisher to a subscriber, executes message payloads on the subscriber at the… |
| CVE-2026-50735 | PG pglogical EnterpriseDB | 6.8 | Jul 28 | pglogical's apply worker does not sufficiently validate the length of certain fields in incoming replication protocol messages before copying them, resulting in an out-of-bounds… |
| CVE-2026-0949 | PE Postgres Enterprise Manager Enterprisedb | 4.8 | Jan 16 | PEM versions prior to 9.8.1 are affected by a stored Cross-site Scripting (XSS) vulnerability that allows users with access to the Manage Charts menu to inject arbitrary… |
| CVE-2025-14038 | HM Hybrid Manager Enterprisedb | 7.0 | Dec 15 | EDB Hybrid Manager contains a flaw that allows an unauthenticated attacker to directly access certain gRPC endpoints |
| CVE-2023-41120 | PA Postgres Advanced Server Enterprisedb | 6.5 | Dec 12 | An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0 |
| CVE-2023-41119 | PA Postgres Advanced Server Enterprisedb | 8.8 | Dec 12 | An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0 |
| CVE-2023-41118 | PA Postgres Advanced Server Enterprisedb | 8.8 | Dec 12 | An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0 |
| CVE-2023-41117 | PA Postgres Advanced Server Enterprisedb | 9.8 | Dec 12 | An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0 |
| CVE-2023-41116 | PA Postgres Advanced Server Enterprisedb | 4.3 | Dec 12 | An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0 |
| CVE-2023-41115 | PA Postgres Advanced Server Enterprisedb | 6.5 | Dec 12 | An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0 |
| CVE-2023-41114 | PA Postgres Advanced Server Enterprisedb | 6.5 | Dec 12 | An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0 |
| CVE-2023-41113 | PA Postgres Advanced Server Enterprisedb | 4.3 | Dec 12 | An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0 |
| CVE-2023-31043 | PA Postgres Advanced Server Enterprisedb | 7.5 | Apr 23 | EnterpriseDB EDB Postgres Advanced Server (EPAS) before 14.6.0 logs unredacted passwords in situations where optional parameters are used with CREATE/ALTER USER/GROUP/ROLE, and… |
| CVE-2007-4639 | PA Postgres Advanced Server Enterprisedb | – | Aug 31 | EnterpriseDB Advanced Server 8.2 does not properly handle certain debugging function calls that occur before a call to pldbg_create_listener, which allows remote authenticated… |