PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE.
CVSS Details
- CVSS 3.1 Base Score: 7.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-jdbcUpgrade postgresql-jdbc-javadoc | May 4, 2022 | Jun 4, 2020 |
| Alpine Linux | — | Upgrade java-postgresql-jdbc | Aug 22, 2024 | Jun 4, 2020 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-jdbcUpgrade postgresql-jdbc-javadoc | Sep 3, 2020 | Jun 4, 2020 |
| Amazon_linux | — | Upgrade postgresql-jdbc | Sep 9, 2021 | Jun 4, 2020 |
| Centos_linux | — | Upgrade postgresql-jdbcUpgrade postgresql-jdbc-javadoc | Jul 29, 2020 | Jun 4, 2020 |
| Debian | — | Upgrade libpgjava | Jul 30, 2024 | Jun 4, 2020 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 18, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade postgresql-jdbc | Feb 22, 2021 | Jun 4, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade postgresql-jdbc | Jan 20, 2021 | Jun 4, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-jdbc | Feb 2, 2021 | Jun 4, 2020 |
| Oracle_linux | — | Upgrade postgresql-jdbcUpgrade postgresql-jdbc-javadoc | Jul 30, 2020 | Jun 4, 2020 |
| Redhat_linux | — | Upgrade postgresql-jdbc-javadocUpgrade postgresql-jdbc | Jul 29, 2020 | Jun 4, 2020 |
| Rocky_linux | — | — | Aug 15, 2024 | Jun 4, 2020 |
| Suse | — | Upgrade postgresql-jdbc | Feb 26, 2021 | Jun 4, 2020 |
| Ubuntu | — | Upgrade libpostgresql-jdbc-java (Ubuntu Pro) | Mar 22, 2023 | Jun 4, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub