Postgres Professional Postgres Pro Enterprise

Name: Postgres Professional Postgres Pro Enterprise
Brand: Postgres Professional

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical1high0medium0low

updated 2026-10-28

vulnerabilities (21)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-2005US	—	1.37% (72nd)	Exploit	no fix	2026-02-12	5 versions
CVE-2025-8714US	—	0.76% (55th)	Exploit	no fix	2025-08-14	5 versions
CVE-2026-6475US	—	0.41% (35th)	Exploit	no fix	2026-05-14	5 versions
CVE-2026-2004US	—	1.34% (71st)	—	no fix	2026-02-12	5 versions
CVE-2026-2006US	—	1.16% (67th)	—	no fix	2026-02-12	5 versions
CVE-2026-6473US	—	1.01% (63rd)	—	no fix	2026-05-14	5 versions
CVE-2026-6479US	—	0.60% (48th)	—	no fix	2026-05-14	5 versions
CVE-2026-6478US	—	0.56% (46th)	—	no fix	2026-05-14	5 versions
CVE-2026-2007US	—	0.55% (46th)	—	no fix	2026-02-12	5 versions
CVE-2026-6477US	—	0.45% (39th)	—	no fix	2026-05-14	5 versions
CVE-2025-8715US	—	0.43% (37th)	—	no fix	2025-08-14	5 versions
CVE-2026-6637US	—	0.37% (31st)	—	no fix	2026-05-14	5 versions
CVE-2025-12818US	—	0.36% (30th)	—	no fix	2025-11-13	5 versions
CVE-2026-2003US	—	0.32% (25th)	—	no fix	2026-02-12	5 versions
CVE-2026-6476US	—	0.29% (21st)	—	no fix	2026-05-14	5 versions
CVE-2025-12817US	—OT elevated	0.24% (15th)	—	no fix	2025-11-13	5 versions
CVE-2025-8713US	—	0.24% (14th)	—	no fix	2025-08-14	5 versions
CVE-2026-6474US	—	0.21% (12th)	—	no fix	2026-05-14	5 versions
CVE-2026-6575US	—	0.21% (11th)	—	no fix	2026-05-14	5 versions
CVE-2026-6638US	high8.8	0.18% (8th)	—	no fix	2026-05-14	5 versions
CVE-2026-6472US	—OT elevated	0.16% (5th)	—	no fix	2026-05-14	5 versions

The flaw types (CWEs) most of these CVEs share.

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')5 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3 CVEs
CWE-264CWE-2643 CVEs
CWE-121Stack-based Buffer Overflow2 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-1287Improper Validation of Specified Type of Input2 CVEs
CWE-190Integer Overflow or Wraparound2 CVEs
CWE-862Missing Authorization2 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.