Vulnerabilities in EnterpriseDB
8 resultsVexday analysis
EnterpriseDB apresenta 8 vulnerabilidades cadastradas, com metade delas publicadas nos últimos 90 dias, indicando evolução recente no panorama de risco. Nenhuma vulnerabilidade está sob exploração ativa confirmada (KEV), mas 2 são críticas, e a fraqueza dominante é controle de acesso inadequado (CWE-862), o que requer atenção em ambientes com privilégios sensíveis. O volume moderado e a ausência de exploração ativa em massa sugerem risco contido, mas exigem acompanhamento de patches para as falhas críticas recentes.
CVE-2024-4545HIGHEDB Postgres Advanced Server (EPAS) authenticated file read permissions bypass using edbldrEPSS 0.5%CVE-2025-2506MEDIUMWhen pglogical attempts to replicate data, it does not verify it is using a replication connection, which means a user with CONNECT access tEPSS 0.3%CVE-2026-50738HIGHA use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be dereferenced after the underlying slEPSS 0.3%CVE-2026-50736CRITICALThe pglogical queue mechanism, used to convey out-of-band commands such as replicated DDL from a publisher to a subscriber, executes messageEPSS 0.2%CVE-2026-50737CRITICALWhen applying replicated changes for a row that is missing one or more columns, pglogical evaluates the affected table's default expressionsEPSS 0.2%CVE-2025-14038HIGHEDB Hybrid Manager contains a flaw that allows an unauthenticated attacker to directly access certain gRPC endpoints. This could allow an atEPSS 0.2%CVE-2026-0949MEDIUMPEM versions prior to 9.8.1 are affected by a stored Cross-site Scripting (XSS) vulnerability that allows users with access to the Manage ChEPSS 0.2%CVE-2026-50735MEDIUMpglogical's apply worker does not sufficiently validate the length of certain fields in incoming replication protocol messages before copyinEPSS 0.2%