Vulnerabilities in EnterpriseDB
13 resultsCVE-2024-4545HIGHEDB Postgres Advanced Server (EPAS) authenticated file read permissions bypass using edbldrEPSS 0.5%CVE-2026-50738HIGHA use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be dereferenced after the underlying slEPSS 0.5%CVE-2026-50736CRITICALThe pglogical queue mechanism, used to convey out-of-band commands such as replicated DDL from a publisher to a subscriber, executes messageEPSS 0.4%CVE-2026-50737CRITICALWhen applying replicated changes for a row that is missing one or more columns, pglogical evaluates the affected table's default expressionsEPSS 0.4%CVE-2026-50735MEDIUMpglogical's apply worker does not sufficiently validate the length of certain fields in incoming replication protocol messages before copyinEPSS 0.4%CVE-2025-2506MEDIUMWhen pglogical attempts to replicate data, it does not verify it is using a replication connection, which means a user with CONNECT access tEPSS 0.3%CVE-2026-96538HIGHWarehousePG pg_file_write/pg_file_rename/pg_file_unlink/pg_logdir_ls privilege escalationEPSS 0.3%CVE-2025-14038HIGHEDB Hybrid Manager contains a flaw that allows an unauthenticated attacker to directly access certain gRPC endpoints. This could allow an atEPSS 0.2%CVE-2026-104949LOWWarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in gp_add_cEPSS 0.2%CVE-2026-0949MEDIUMPEM versions prior to 9.8.1 are affected by a stored Cross-site Scripting (XSS) vulnerability that allows users with access to the Manage ChEPSS 0.2%CVE-2026-104947MEDIUMWarehousePG (WHPG) 7.2.1 through 7.6.0 is affected by a missing authorization vulnerability (CWE-862) in the built-in function gp_log_backenEPSS 0.2%CVE-2026-104948HIGHWarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in the builEPSS 0.2%CVE-2026-93853HIGHBarman snapshot backup deletion trusts unverified backup catalog metadataEPSS 0.2%