Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2017-7484

postgresql: Selectivity estimators bypass SELECT privilege checks

It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3 did not check user privileges before providing information from pg_statistic, possibly leaking information. An unprivileged attacker could use this flaw to steal some information from tables they are otherwise not allowed to access.

CVSS 3.0 · 7.5 High EPSS 2.6% KEV · Not listed
Vendors
Postgresql Redhat
Products
Postgresql Enterprise Linux Network Satellite and 2 more
CVE-2017-7486

postgresql: pg_user_mappings view discloses foreign server passwords

PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any user having USAGE privilege on the associated foreign server.

CVSS 3.0 · 7.5 High EPSS 6.3% KEV · Not listed
Vendors
Postgresql Redhat
Products
Postgresql Enterprise Linux Network Satellite and 2 more
CVE-2017-7514

SAT 5 XSS in the Failed Systems page

A cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red Hat Satellite before version 5.8.0. A user able to specify a failed action could exploit this flaw to perform XSS attacks against other Satellite users.

CVSS 3.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Network Satellite Network Satellite Managed Db Satellite