Approved changes feed: RSS · Atom

cpe:2.3:a:postgresql:postgresql:9.3:*:*:*:*:*:*:*

part: a version: 9.3 update: *

VendorPostgresql (17ae1743-f0f5-50ae-b0e9-670248233cae)
ProductPostgresql (cce58cf9-95f4-56e0-85d7-e79aa6a78bc7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/postgresql purl2cpe 2026-06-01 10:12:17.143703
pkg:deb/ubuntu/postgresql purl2cpe 2026-06-01 10:12:17.143704
pkg:docker/postgres purl2cpe 2026-06-01 10:12:17.143705
pkg:github/postgres/postgres purl2cpe 2026-06-01 10:12:17.143707
pkg:gitlab/redhat/postgresql purl2cpe 2026-06-01 10:12:17.143708
pkg:rpm/fedora/postgresql purl2cpe 2026-06-01 10:12:17.143709

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-7547 vulnerable 2026-06-08 05:09:56.502857 Details available
PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so.
Published: 2017-08-16T18:00:00.000Z
Updated: 2024-09-16T23:41:38.650Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7546 vulnerable 2026-06-08 05:09:56.493471 Details available
PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password.
Published: 2017-08-16T18:00:00.000Z
Updated: 2024-09-16T17:18:53.123Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7486 vulnerable 2026-06-08 05:09:56.142395 Details available
PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any user having USAGE privilege on the associated foreign server.
Published: 2017-05-12T19:00:00.000Z
Updated: 2024-08-05T16:04:11.547Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7485 vulnerable 2026-06-08 05:09:56.078576 Details available
In PostgreSQL 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3, it was found that the PGREQUIRESSL environment variable was no longer enforcing a SSL/TLS connection to a PostgreSQL server. An active Man-in-the-Middle attacker could use this flaw to strip the SSL/TLS protection from a connection between a client and a server.
Published: 2017-05-12T19:00:00.000Z
Updated: 2024-08-05T16:04:11.584Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7484 vulnerable 2026-06-08 05:09:56.056231 Details available
It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3 did not check user privileges before providing information from pg_statistic, possibly leaking information. An unprivileged attacker could use this flaw to steal some information from tables they are otherwise not allowed to access.
Published: 2017-05-12T19:00:00.000Z
Updated: 2024-08-05T16:04:11.415Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-15098 vulnerable 2026-06-08 05:08:57.879539 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12172 vulnerable 2026-06-08 05:08:45.457817 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5424 vulnerable 2026-06-08 05:07:57.001940 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5423 vulnerable 2026-06-08 05:07:56.987661 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5288 vulnerable 2026-06-08 05:06:49.467545 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3165 vulnerable 2026-06-08 05:06:37.360416 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2669 vulnerable 2026-06-08 05:05:29.534572 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0067 vulnerable 2026-06-08 05:05:11.124906 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0066 vulnerable 2026-06-08 05:05:11.083613 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0065 vulnerable 2026-06-08 05:05:11.081460 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0064 vulnerable 2026-06-08 05:05:11.079178 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0063 vulnerable 2026-06-08 05:05:11.077032 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0062 vulnerable 2026-06-08 05:05:11.074852 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0061 vulnerable 2026-06-08 05:05:11.072480 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0060 vulnerable 2026-06-08 05:05:11.068811 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.