Known vulnerabilities in pgadmin4-web-uwsgi

Vendor: SUSE
Software: pgadmin4-web-uwsgi
Software CPE: cpe:2.3:o:suse:pgadmin4-web-uwsgi:*:*:*:*:*:suse_linux:*:*
Website: https://www.suse.com/
Total vulnerabilities: 20
Public exploits: 3
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting pgadmin4-web-uwsgi pgadmin4-web-uwsgi is affected by 20 known vulnerabilities: 4 high, 10 medium, 6 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU120966 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2025-12764		 CWE-90 Medium
No
No
 4.30-150300.3.21.1, 8.5-150600.3.18.1 05.01.2026 SB20260105114
SB20260105123
SB20260105124
#VU120963 - Improper Certificate Validation
CVE-2025-12765		 CWE-295 Medium
No
No
 4.30-150300.3.21.1, 8.5-150600.3.18.1 05.01.2026 SB20260105114
SB20260105123
SB20260105124
#VU117355 - Origin Validation Error
CVE-2025-9636		 CWE-346 Medium
No
No
 4.30-150300.3.24.1, 8.5-150600.3.15.1 17.10.2025 SB2025101755
SB2025101761
SB2025101764
and 1 more
#VU107607 - Resource Management Errors
CVE-2023-1907		 CWE-399 Medium
No
No
 4.30-150300.3.18.1 18.04.2025 SB2025041813
SB2025041825
SB2025081437
and 1 more
#VU105452 - Server-Side Request Forgery (SSRF)
CVE-2025-27152		 CWE-918 Medium
Available
No
 4.30-150300.3.18.1, 8.5-150600.3.9.1 07.03.2025 SB2025030777
SB2025031918
SB2025032417
and 43 more
#VU99563 - Improper Verification of Cryptographic Signature
CVE-2024-48948		 CWE-347 Low
No
No
 8.5-150600.3.6.1 31.10.2024 SB2024103162
SB2024103166
SB2024110115
and 18 more
#VU99562 - Improper Authentication
CVE-2024-9014		 CWE-287 High
Available
No
 8.5-150600.3.6.1 31.10.2024 SB2024103161
SB2024103166
SB2024103168
and 1 more
#VU98513 - Improper input validation
CVE-2024-48949		 CWE-20 Medium
No
No
 8.5-150600.3.6.1 14.10.2024 SB2024101490
SB20241014105
SB20241014106
and 25 more
#VU97244 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-38999		 CWE-1321 High
No
No
 8.5-150600.3.6.1 13.09.2024 SB2024091339
SB2024091626
SB20241015165
and 13 more
#VU97243 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-38998		 CWE-1321 High
No
No
 8.5-150600.3.6.1 13.09.2024 SB2024091338
SB2024091626
SB2024103080
and 4 more
#VU96642 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43788		 CWE-79 Low
No
No
 8.5-150600.3.6.1 30.08.2024 SB2024083026
SB2024100824
SB2024100825
and 21 more
#VU96050 - Server-Side Request Forgery (SSRF)
CVE-2024-39338		 CWE-918 Medium
No
No
 8.5-150600.3.6.1 15.08.2024 SB2024081543
SB2024090326
SB2024090446
and 63 more
#VU94660 - Improper Check for Unusual or Exceptional Conditions
CVE-2024-38355		 CWE-754 Medium
No
No
 8.5-150600.3.6.1 23.07.2024 SB2024072312
SB2024072313
SB2024103166
and 2 more
#VU93853 - Improper Authentication
CVE-2024-4215		 CWE-287 Low
No
No
 8.5-150600.3.3.1 08.07.2024 SB2024070804
SB2024070806
SB2024070808
#VU93852 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-4216		 CWE-79 Low
No
No
 4.30-150300.3.15.1, 8.5-150600.3.3.1 08.07.2024 SB2024070804
SB2024070806
SB2024070808
and 2 more
#VU92406 - Incorrect Regular Expression
CVE-2024-4067		 CWE-185 Medium
No
No
 8.5-150600.3.6.1 20.06.2024 SB20240620121
SB2024062832
SB2024070501
and 41 more
#VU92405 - Uncontrolled Memory Allocation
CVE-2024-4068		 CWE-789 Medium
No
No
 4.30-150300.3.18.1, 8.5-150600.3.6.1 20.06.2024 SB20240620121
SB2024062833
SB2024070809
and 51 more
#VU87340 - Deserialization of Untrusted Data
CVE-2024-2044		 CWE-502 High
Available
No
 4.30-150300.3.12.1 11.03.2024 SB2024031138
SB2024031142
SB2024041860
#VU71456 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-0241		 CWE-22 Low
No
No
 4.30-150300.3.9.1 24.01.2023 SB2023012402
SB2023041812
SB20230816100
#VU71214 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-22298		 CWE-601 Low
No
No
 4.30-150300.3.6.1 17.01.2023 SB2023011722
SB2023040332
SB2023081673
and 1 more