Approved changes feed: RSS · Atom
cpe:2.3:a:pgadmin:pgadmin_4:*:*:*:*:*:postgresql:*:*
part: a version: * update: *
| Vendor | Pgadmin (7b0eac40-34ec-5c7c-ab30-f64b5bcb1271) |
|---|---|
| Product | Pgadmin 4 (58509cef-5fbc-593a-aaa3-5d23db7954e4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | postgresql |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/dpage/pgadmin4 |
purl2cpe | 2026-06-01 10:14:56.730780 |
pkg:github/pgadmin-org/pgadmin4 |
purl2cpe | 2026-06-01 10:14:56.730781 |
pkg:pypi/pgadmin4 |
purl2cpe | 2026-06-01 10:14:56.730783 |
pkg:rpm/fedora/pgadmin4 |
purl2cpe | 2026-06-01 10:14:56.730784 |
pkg:rpm/opensuse/pgadmin4 |
purl2cpe | 2026-06-01 10:14:56.730786 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-9636 |
vulnerable | 2026-06-08 07:47:09.419018 |
Cross-Origin Opener Policy Vulnerability in pgAdmin 4
HIGH (7.9)
pgAdmin <= 9.7 is affected by a Cross-Origin Opener Policy (COOP) vulnerability. This vulnerability allows an attacker to manipulate the OAuth flow, potentially leading to unauthorised account access, account takeover, data breaches, and privilege escalation.
Published: 2025-09-04T16:43:27.710Z
Updated: 2026-02-26T17:49:38.292Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2946 |
vulnerable | 2026-06-08 07:16:58.714313 |
Cross-Site Vulnerability(XSS) due to arbitrary HTML/JavaScript gets executed while query result rendering in Query Tool and View/Edit Data Tool of pgAdmin 4
CRITICAL (9.1)
pgAdmin <= 9.1 is affected by a security vulnerability with Cross-Site Scripting(XSS). If attackers execute any arbitrary HTML/JavaScript in a user's browser through query result rendering, then HTML/JavaScript runs on the browser.
Published: 2025-04-03T12:23:30.694Z
Updated: 2025-04-03T17:57:18.517Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2945 |
vulnerable | 2026-06-08 07:16:58.713868 |
pgAdmin 4: Remote Code Execution in Query Tool and Cloud Deployment
CRITICAL (9.9)
Remote Code Execution security vulnerability in pgAdmin 4 (Query Tool and Cloud Deployment modules).
The vulnerability is associated with the 2 POST endpoints; /sqleditor/query_tool/download, where the query_commited parameter and /cloud/deploy endpoint, where the high_availability parameter is unsafely passed to the Python eval() function, allowing arbitrary code execution.
This issue affects pgAdmin 4: before 9.2.
Published: 2025-04-03T12:23:14.792Z
Updated: 2026-02-26T18:28:58.124Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13780 |
vulnerable | 2026-06-08 07:06:32.694289 |
Remote Code Execution vulnerability when restoring PLAIN-format SQL dumps in server mode (pgAdmin 4)
CRITICAL (9.1)
pgAdmin versions up to 9.10 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the server hosting pgAdmin, posing a critical risk to the integrity and security of the database management system and underlying data.
Published: 2025-12-11T18:30:47.812Z
Updated: 2026-02-26T16:07:46.344Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12765 |
vulnerable | 2026-06-08 07:04:30.785329 |
pgAdmin 4: LDAP authentication flow vulnerable to TLS certificate verification bypass.
HIGH (7.5)
pgAdmin <= 9.9 is affected by a vulnerability in the LDAP authentication mechanism allows bypassing TLS certificate verification.
Published: 2025-11-13T13:00:11.448Z
Updated: 2025-11-13T14:00:56.314Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12764 |
vulnerable | 2026-06-08 07:04:30.784895 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12763 |
vulnerable | 2026-06-08 07:04:30.784425 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12762 |
vulnerable | 2026-06-08 07:04:30.783795 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9014 |
vulnerable | 2026-06-08 07:00:26.473890 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6238 |
vulnerable | 2026-06-08 06:58:18.343746 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4216 |
vulnerable | 2026-06-08 06:50:17.236449 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4215 |
vulnerable | 2026-06-08 06:50:17.235927 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3116 |
vulnerable | 2026-06-08 06:41:52.517923 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2044 |
vulnerable | 2026-06-08 06:33:30.196081 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5002 |
vulnerable | 2026-06-08 06:19:40.660557 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22298 |
vulnerable | 2026-06-08 05:54:23.585304 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4223 |
vulnerable | 2026-06-08 05:51:36.992453 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.