Known vulnerabilities in pgadmin4-cloud

Known vulnerabilities in pgadmin4-cloud

Vendor: SUSE

Software: pgadmin4-cloud

Software CPE: cpe:2.3:o:suse:pgadmin4-cloud:*:*:*:*:*:suse_linux:*:*

Website: https://www.suse.com/

Total vulnerabilities: 16

Public exploits: 2

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (16)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU120966 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') CVE-2025-12764	CWE-90	Medium	No	No	8.5-150600.3.18.1	05.01.2026	SB20260105114 SB20260105123 SB20260105124
#VU120963 - Improper Certificate Validation CVE-2025-12765	CWE-295	Medium	No	No	8.5-150600.3.18.1	05.01.2026	SB20260105114 SB20260105123 SB20260105124
#VU117355 - Origin Validation Error CVE-2025-9636	CWE-346	Medium	No	No	8.5-150600.3.15.1	17.10.2025	SB2025101755 SB2025101761 SB2025101764 and 1 more
#VU105452 - Server-Side Request Forgery (SSRF) CVE-2025-27152	CWE-918	Medium	Available	No	8.5-150600.3.9.1	07.03.2025	SB2025030777 SB2025031918 SB2025032417 and 42 more
#VU99563 - Improper Verification of Cryptographic Signature CVE-2024-48948	CWE-347	Low	No	No	8.5-150600.3.6.1	31.10.2024	SB2024103162 SB2024103166 SB2024110115 and 18 more
#VU99562 - Improper Authentication CVE-2024-9014	CWE-287	High	Available	No	8.5-150600.3.6.1	31.10.2024	SB2024103161 SB2024103166 SB2024103168 and 1 more
#VU98513 - Improper input validation CVE-2024-48949	CWE-20	Medium	No	No	8.5-150600.3.6.1	14.10.2024	SB2024101490 SB20241014105 SB20241014106 and 25 more
#VU97244 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2024-38999	CWE-1321	High	No	No	8.5-150600.3.6.1	13.09.2024	SB2024091339 SB2024091626 SB20241015165 and 13 more
#VU97243 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2024-38998	CWE-1321	High	No	No	8.5-150600.3.6.1	13.09.2024	SB2024091338 SB2024091626 SB2024103080 and 4 more
#VU96642 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-43788	CWE-79	Low	No	No	8.5-150600.3.6.1	30.08.2024	SB2024083026 SB2024100824 SB2024100825 and 21 more
#VU96050 - Server-Side Request Forgery (SSRF) CVE-2024-39338	CWE-918	Medium	No	No	8.5-150600.3.6.1	15.08.2024	SB2024081543 SB2024090326 SB2024090446 and 63 more
#VU94660 - Improper Check for Unusual or Exceptional Conditions CVE-2024-38355	CWE-754	Medium	No	No	8.5-150600.3.6.1	23.07.2024	SB2024072312 SB2024072313 SB2024103166 and 2 more
#VU93853 - Improper Authentication CVE-2024-4215	CWE-287	Low	No	No	8.5-150600.3.3.1	08.07.2024	SB2024070804 SB2024070806 SB2024070808
#VU93852 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-4216	CWE-79	Low	No	No	8.5-150600.3.3.1	08.07.2024	SB2024070804 SB2024070806 SB2024070808 and 2 more
#VU92406 - Incorrect Regular Expression CVE-2024-4067	CWE-185	Medium	No	No	8.5-150600.3.6.1	20.06.2024	SB20240620121 SB2024062832 SB2024070501 and 41 more
#VU92405 - Uncontrolled Memory Allocation CVE-2024-4068	CWE-789	Medium	No	No	8.5-150600.3.6.1	20.06.2024	SB20240620121 SB2024062833 SB2024070809 and 51 more