GCVE - cpe:2.3:a:postgresql:postgresql:9.5.7:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:postgresql:postgresql:9.5.7:*:*:*:*:*:*:*

part: a version: 9.5.7 update: *

Vendor	Postgresql (`17ae1743-f0f5-50ae-b0e9-670248233cae`)
Product	Postgresql (`cce58cf9-95f4-56e0-85d7-e79aa6a78bc7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/postgresql`	purl2cpe	2026-06-01 10:12:17.217102
`pkg:deb/ubuntu/postgresql`	purl2cpe	2026-06-01 10:12:17.217103
`pkg:docker/postgres`	purl2cpe	2026-06-01 10:12:17.217104
`pkg:github/postgres/postgres`	purl2cpe	2026-06-01 10:12:17.217106
`pkg:gitlab/redhat/postgresql`	purl2cpe	2026-06-01 10:12:17.217107
`pkg:rpm/fedora/postgresql`	purl2cpe	2026-06-01 10:12:17.217108

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-7547`	vulnerable	2026-06-08 05:09:56.509312	Details available PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so. Published: 2017-08-16T18:00:00.000Z Updated: 2024-09-16T23:41:38.650Z Open on db.gcve.eu Reference links https://access.redhat.com/errata/RHSA-2017:2728 http://www.debian.org/security/2017/dsa-3936 https://access.redhat.com/errata/RHSA-2017:2678 http://www.debian.org/security/2017/dsa-3935 http://www.securitytracker.com/id/1039142	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7546`	vulnerable	2026-06-08 05:09:56.494286	Details available PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password. Published: 2017-08-16T18:00:00.000Z Updated: 2024-09-16T17:18:53.123Z Open on db.gcve.eu Reference links https://access.redhat.com/errata/RHSA-2017:2728 http://www.debian.org/security/2017/dsa-3936 https://access.redhat.com/errata/RHSA-2017:2678 https://access.redhat.com/errata/RHSA-2017:2860 http://www.securityfocus.com/bid/100278	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7486`	vulnerable	2026-06-08 05:09:56.148695	Details available PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any user having USAGE privilege on the associated foreign server. Published: 2017-05-12T19:00:00.000Z Updated: 2024-08-05T16:04:11.547Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1038476 http://www.debian.org/security/2017/dsa-3851 https://access.redhat.com/errata/RHSA-2017:2425 https://access.redhat.com/errata/RHSA-2017:1678 https://access.redhat.com/errata/RHSA-2017:1677	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-15099`	vulnerable	2026-06-08 05:08:57.905673	Details available INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 disclose table contents that the invoker lacks privilege to read. These exploits affect only tables where the attacker lacks full read access but has both INSERT and UPDATE privileges. Exploits bypass row level security policies and lack of SELECT privilege. Published: 2017-11-22T18:00:00.000Z Updated: 2024-09-16T16:43:27.924Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/101781 https://access.redhat.com/errata/RHSA-2018:2511 https://www.postgresql.org/support/security/ http://www.securitytracker.com/id/1039752 https://www.postgresql.org/about/news/1801/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-15098`	vulnerable	2026-06-08 05:08:57.900539	Details available Invalid json_populate_recordset or jsonb_populate_recordset function calls in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, and 9.3.x before 9.3.20 can crash the server or disclose a few bytes of server memory. Published: 2017-11-22T17:00:00.000Z Updated: 2024-09-16T23:10:51.250Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/101781 https://www.debian.org/security/2017/dsa-4027 https://access.redhat.com/errata/RHSA-2018:2511 https://www.postgresql.org/support/security/ http://www.securitytracker.com/id/1039752	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-12172`	vulnerable	2026-06-08 05:08:45.478408	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.