GCVE - cpe:2.3:a:postgresql:postgresql:9.5.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:postgresql:postgresql:9.5.2:*:*:*:*:*:*:*

part: a version: 9.5.2 update: *

Vendor	Postgresql (`17ae1743-f0f5-50ae-b0e9-670248233cae`)
Product	Postgresql (`cce58cf9-95f4-56e0-85d7-e79aa6a78bc7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/postgresql`	purl2cpe	2026-06-01 10:12:17.217013
`pkg:deb/ubuntu/postgresql`	purl2cpe	2026-06-01 10:12:17.217014
`pkg:docker/postgres`	purl2cpe	2026-06-01 10:12:17.217015
`pkg:github/postgres/postgres`	purl2cpe	2026-06-01 10:12:17.217017
`pkg:gitlab/redhat/postgresql`	purl2cpe	2026-06-01 10:12:17.217018
`pkg:rpm/fedora/postgresql`	purl2cpe	2026-06-01 10:12:17.217019

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-7547`	vulnerable	2026-06-08 05:09:56.509208	Details available PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so. Published: 2017-08-16T18:00:00.000Z Updated: 2024-09-16T23:41:38.650Z Open on db.gcve.eu Reference links https://access.redhat.com/errata/RHSA-2017:2728 http://www.debian.org/security/2017/dsa-3936 https://access.redhat.com/errata/RHSA-2017:2678 http://www.debian.org/security/2017/dsa-3935 http://www.securitytracker.com/id/1039142	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7546`	vulnerable	2026-06-08 05:09:56.494200	Details available PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password. Published: 2017-08-16T18:00:00.000Z Updated: 2024-09-16T17:18:53.123Z Open on db.gcve.eu Reference links https://access.redhat.com/errata/RHSA-2017:2728 http://www.debian.org/security/2017/dsa-3936 https://access.redhat.com/errata/RHSA-2017:2678 https://access.redhat.com/errata/RHSA-2017:2860 http://www.securityfocus.com/bid/100278	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7486`	vulnerable	2026-06-08 05:09:56.147258	Details available PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any user having USAGE privilege on the associated foreign server. Published: 2017-05-12T19:00:00.000Z Updated: 2024-08-05T16:04:11.547Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1038476 http://www.debian.org/security/2017/dsa-3851 https://access.redhat.com/errata/RHSA-2017:2425 https://access.redhat.com/errata/RHSA-2017:1678 https://access.redhat.com/errata/RHSA-2017:1677	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7485`	vulnerable	2026-06-08 05:09:56.079424	Details available In PostgreSQL 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3, it was found that the PGREQUIRESSL environment variable was no longer enforcing a SSL/TLS connection to a PostgreSQL server. An active Man-in-the-Middle attacker could use this flaw to strip the SSL/TLS protection from a connection between a client and a server. Published: 2017-05-12T19:00:00.000Z Updated: 2024-08-05T16:04:11.584Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1038476 http://www.debian.org/security/2017/dsa-3851 https://access.redhat.com/errata/RHSA-2017:2425 https://access.redhat.com/errata/RHSA-2017:1678 https://access.redhat.com/errata/RHSA-2017:1677	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7484`	vulnerable	2026-06-08 05:09:56.074121	Details available It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3 did not check user privileges before providing information from pg_statistic, possibly leaking information. An unprivileged attacker could use this flaw to steal some information from tables they are otherwise not allowed to access. Published: 2017-05-12T19:00:00.000Z Updated: 2024-08-05T16:04:11.415Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1038476 http://www.debian.org/security/2017/dsa-3851 https://access.redhat.com/errata/RHSA-2017:2425 https://access.redhat.com/errata/RHSA-2017:1678 https://access.redhat.com/errata/RHSA-2017:1677	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-15099`	vulnerable	2026-06-08 05:08:57.905582	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-15098`	vulnerable	2026-06-08 05:08:57.898107	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-12172`	vulnerable	2026-06-08 05:08:45.475975	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-5424`	vulnerable	2026-06-08 05:07:57.002378	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-5423`	vulnerable	2026-06-08 05:07:57.000125	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.