Known vulnerabilities in rh-postgresql12-postgresql (Red Hat package)

Vendor: Red Hat Inc.
Software: rh-postgresql12-postgresql (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:rh-postgresql12-postgresql_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 21
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting rh-postgresql12-postgresql (Red Hat package) rh-postgresql12-postgresql (Red Hat package) is affected by 21 known vulnerabilities: 1 high, 14 medium, 6 low Critical High Medium Low

Vulnerabilities (21)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86275 - Improper Privilege Management
CVE-2024-0985		 CWE-269 Medium
No
No
 12.18-1.el7 08.02.2024 SB2024020869
SB2024021617
SB2024021637
and 62 more
#VU82943 - Permissions, Privileges, and Access Controls
CVE-2023-5870		 CWE-264 Low
No
No
 12.17-1.el7 09.11.2023 SB2023110930
SB2023111320
SB2023111324
and 54 more
#VU82942 - Integer overflow
CVE-2023-5869		 CWE-190 High
No
No
 12.17-1.el7 09.11.2023 SB2023110930
SB2023111320
SB2023111324
and 70 more
#VU82941 - Exposure of sensitive information to an unauthorized actor
CVE-2023-5868		 CWE-200 Low
No
No
 12.17-1.el7 09.11.2023 SB2023110930
SB2023111320
SB2023111324
and 53 more
#VU79454 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-39417		 CWE-89 Medium
No
No
 12.17-1.el7 11.08.2023 SB2023081132
SB2023081715
SB2023081716
and 60 more
#VU76042 - Security Features
CVE-2023-2455		 CWE-254 Low
No
No
 12.15-1.el7 11.05.2023 SB2023051138
SB2023051301
SB2023051528
and 61 more
#VU76041 - Permissions, Privileges, and Access Controls
CVE-2023-2454		 CWE-264 Medium
No
No
 12.15-1.el7 11.05.2023 SB2023051138
SB2023051301
SB2023051528
and 55 more
#VU63126 - Permissions, Privileges, and Access Controls
CVE-2022-1552		 CWE-264 Medium
No
No
 12.11-1.el7 12.05.2022 SB2022051213
SB2022051303
SB2022051304
and 48 more
#VU59043 - Missing release of memory after effective lifetime
CVE-2021-3677		 CWE-401 Low
No
No
 12.9-1.el7 16.12.2021 SB2021121641
SB2021121642
SB2021121643
and 17 more
#VU58114 - Missing Encryption of Sensitive Data
CVE-2021-23222		 CWE-311 Medium
No
No
 12.9-1.el7 11.11.2021 SB2021111139
SB2021111708
SB2021111709
and 29 more
#VU58113 - Missing Encryption of Sensitive Data
CVE-2021-23214		 CWE-311 Medium
No
No
 12.9-1.el7 11.11.2021 SB2021111139
SB2021111708
SB2021111709
and 34 more
#VU53233 - Missing release of memory after effective lifetime
CVE-2021-32029		 CWE-401 Medium
No
No
 12.7-1.el7 13.05.2021 SB2021051316
SB2021051605
SB2021052507
and 18 more
#VU53232 - Missing release of memory after effective lifetime
CVE-2021-32028		 CWE-401 Medium
No
No
 12.7-1.el7 13.05.2021 SB2021051316
SB2021051605
SB2021052507
and 41 more
#VU53231 - Integer overflow
CVE-2021-32027		 CWE-190 Medium
No
No
 12.7-1.el7 13.05.2021 SB2021051316
SB2021051605
SB2021052507
and 43 more
#VU50655 - Exposure of sensitive information to an unauthorized actor
CVE-2021-3393		 CWE-200 Low
No
No
 12.7-1.el7 11.02.2021 SB2021021136
SB2021022002
SB2021022618
and 9 more
#VU48436 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-25695		 CWE-89 Medium
No
No
 12.5-1.el7 16.11.2020 SB2020111609
SB2020111711
SB2020111816
and 33 more
#VU48437 - Improper Access Control
CVE-2020-25694		 CWE-284 Medium
No
No
 12.5-1.el7 16.11.2020 SB2020111609
SB2020111711
SB2020111815
and 35 more
#VU48438 - Improper input validation
CVE-2020-25696		 CWE-20 Medium
No
No
 12.5-1.el7 16.11.2020 SB2020111609
SB2020111711
SB2020111817
and 32 more
#VU45749 - Untrusted Search Path
CVE-2020-14350		 CWE-426 Medium
No
No
 12.4-1.el7 18.08.2020 SB2020081801
SB2020081802
SB2020081803
and 31 more
#VU45748 - Untrusted Search Path
CVE-2020-14349		 CWE-426 Medium
No
No
 12.4-1.el7 18.08.2020 SB2020081801
SB2020081803
SB2020082205
and 23 more


Showing elements 1 - 20 out of 21