CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-41119

An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It contains the function _dbms_aq_move_to_exception_queue that may be used to elevate a user's privileges to superuser. This function accepts the OID of a table, and then accesses that table as the superuser by using SELECT and DML commands.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 24.5%

CVSS Severity

CVSS v3 Score 8.8

References

Products affected by CVE-2023-41119

Enterprisedb » Postgres Advanced Server » Version: N/A

cpe:2.3:a:enterprisedb:postgres_advanced_server:-
Enterprisedb » Postgres Advanced Server » Version: 10.0.0

cpe:2.3:a:enterprisedb:postgres_advanced_server:10.0.0
Enterprisedb » Postgres Advanced Server » Version: 10.10.18

cpe:2.3:a:enterprisedb:postgres_advanced_server:10.10.18
Enterprisedb » Postgres Advanced Server » Version: 10.11.19

cpe:2.3:a:enterprisedb:postgres_advanced_server:10.11.19
Enterprisedb » Postgres Advanced Server » Version: 10.12.20

cpe:2.3:a:enterprisedb:postgres_advanced_server:10.12.20
Enterprisedb » Postgres Advanced Server » Version: 10.13.21

cpe:2.3:a:enterprisedb:postgres_advanced_server:10.13.21
Enterprisedb » Postgres Advanced Server » Version: 10.14.22

cpe:2.3:a:enterprisedb:postgres_advanced_server:10.14.22
Enterprisedb » Postgres Advanced Server » Version: 10.14.23

cpe:2.3:a:enterprisedb:postgres_advanced_server:10.14.23
Enterprisedb » Postgres Advanced Server » Version: 10.15.24

cpe:2.3:a:enterprisedb:postgres_advanced_server:10.15.24
Enterprisedb » Postgres Advanced Server » Version: 10.16.25

cpe:2.3:a:enterprisedb:postgres_advanced_server:10.16.25
Enterprisedb » Postgres Advanced Server » Version: 10.17.26

cpe:2.3:a:enterprisedb:postgres_advanced_server:10.17.26
Enterprisedb » Postgres Advanced Server » Version: 10.17.27

cpe:2.3:a:enterprisedb:postgres_advanced_server:10.17.27
Enterprisedb » Postgres Advanced Server » Version: 10.18.28

cpe:2.3:a:enterprisedb:postgres_advanced_server:10.18.28
Enterprisedb » Postgres Advanced Server » Version: 10.19.29

cpe:2.3:a:enterprisedb:postgres_advanced_server:10.19.29
Enterprisedb » Postgres Advanced Server » Version: 10.20.30

cpe:2.3:a:enterprisedb:postgres_advanced_server:10.20.30
Enterprisedb » Postgres Advanced Server » Version: 10.21.31

cpe:2.3:a:enterprisedb:postgres_advanced_server:10.21.31
Enterprisedb » Postgres Advanced Server » Version: 10.22.32

cpe:2.3:a:enterprisedb:postgres_advanced_server:10.22.32
Enterprisedb » Postgres Advanced Server » Version: 10.23.33

cpe:2.3:a:enterprisedb:postgres_advanced_server:10.23.33
Enterprisedb » Postgres Advanced Server » Version: 10.4.9

cpe:2.3:a:enterprisedb:postgres_advanced_server:10.4.9
Enterprisedb » Postgres Advanced Server » Version: 10.5.12

cpe:2.3:a:enterprisedb:postgres_advanced_server:10.5.12
Enterprisedb » Postgres Advanced Server » Version: 10.6.13

cpe:2.3:a:enterprisedb:postgres_advanced_server:10.6.13
Enterprisedb » Postgres Advanced Server » Version: 10.7.15

cpe:2.3:a:enterprisedb:postgres_advanced_server:10.7.15
Enterprisedb » Postgres Advanced Server » Version: 10.8.16

cpe:2.3:a:enterprisedb:postgres_advanced_server:10.8.16
Enterprisedb » Postgres Advanced Server » Version: 10.9.17

cpe:2.3:a:enterprisedb:postgres_advanced_server:10.9.17
Enterprisedb » Postgres Advanced Server » Version: 11.1.7

cpe:2.3:a:enterprisedb:postgres_advanced_server:11.1.7
Enterprisedb » Postgres Advanced Server » Version: 11.10.19

cpe:2.3:a:enterprisedb:postgres_advanced_server:11.10.19
Enterprisedb » Postgres Advanced Server » Version: 11.11.20

cpe:2.3:a:enterprisedb:postgres_advanced_server:11.11.20
Enterprisedb » Postgres Advanced Server » Version: 11.12.21

cpe:2.3:a:enterprisedb:postgres_advanced_server:11.12.21
Enterprisedb » Postgres Advanced Server » Version: 11.12.22

cpe:2.3:a:enterprisedb:postgres_advanced_server:11.12.22
Enterprisedb » Postgres Advanced Server » Version: 11.13.23

cpe:2.3:a:enterprisedb:postgres_advanced_server:11.13.23
Enterprisedb » Postgres Advanced Server » Version: 11.14.24

cpe:2.3:a:enterprisedb:postgres_advanced_server:11.14.24
Enterprisedb » Postgres Advanced Server » Version: 11.15.25

cpe:2.3:a:enterprisedb:postgres_advanced_server:11.15.25
Enterprisedb » Postgres Advanced Server » Version: 11.16.26

cpe:2.3:a:enterprisedb:postgres_advanced_server:11.16.26
Enterprisedb » Postgres Advanced Server » Version: 11.17.28

cpe:2.3:a:enterprisedb:postgres_advanced_server:11.17.28
Enterprisedb » Postgres Advanced Server » Version: 11.18.29

cpe:2.3:a:enterprisedb:postgres_advanced_server:11.18.29
Enterprisedb » Postgres Advanced Server » Version: 11.19.30

cpe:2.3:a:enterprisedb:postgres_advanced_server:11.19.30
Enterprisedb » Postgres Advanced Server » Version: 11.2.9

cpe:2.3:a:enterprisedb:postgres_advanced_server:11.2.9
Enterprisedb » Postgres Advanced Server » Version: 11.3.10

cpe:2.3:a:enterprisedb:postgres_advanced_server:11.3.10
Enterprisedb » Postgres Advanced Server » Version: 11.4.11

cpe:2.3:a:enterprisedb:postgres_advanced_server:11.4.11
Enterprisedb » Postgres Advanced Server » Version: 11.5.12

cpe:2.3:a:enterprisedb:postgres_advanced_server:11.5.12
Enterprisedb » Postgres Advanced Server » Version: 11.6.13

cpe:2.3:a:enterprisedb:postgres_advanced_server:11.6.13
Enterprisedb » Postgres Advanced Server » Version: 11.7.14

cpe:2.3:a:enterprisedb:postgres_advanced_server:11.7.14
Enterprisedb » Postgres Advanced Server » Version: 11.8.15

cpe:2.3:a:enterprisedb:postgres_advanced_server:11.8.15
Enterprisedb » Postgres Advanced Server » Version: 11.9.16

cpe:2.3:a:enterprisedb:postgres_advanced_server:11.9.16
Enterprisedb » Postgres Advanced Server » Version: 11.9.17

cpe:2.3:a:enterprisedb:postgres_advanced_server:11.9.17
Enterprisedb » Postgres Advanced Server » Version: 12.0.0

cpe:2.3:a:enterprisedb:postgres_advanced_server:12.0.0
Enterprisedb » Postgres Advanced Server » Version: 12.1.2

cpe:2.3:a:enterprisedb:postgres_advanced_server:12.1.2
Enterprisedb » Postgres Advanced Server » Version: 12.10.14

cpe:2.3:a:enterprisedb:postgres_advanced_server:12.10.14
Enterprisedb » Postgres Advanced Server » Version: 12.11.15

cpe:2.3:a:enterprisedb:postgres_advanced_server:12.11.15
Enterprisedb » Postgres Advanced Server » Version: 12.12.16

cpe:2.3:a:enterprisedb:postgres_advanced_server:12.12.16
Enterprisedb » Postgres Advanced Server » Version: 12.13.17

cpe:2.3:a:enterprisedb:postgres_advanced_server:12.13.17
Enterprisedb » Postgres Advanced Server » Version: 12.14.18

cpe:2.3:a:enterprisedb:postgres_advanced_server:12.14.18
Enterprisedb » Postgres Advanced Server » Version: 12.2.3

cpe:2.3:a:enterprisedb:postgres_advanced_server:12.2.3
Enterprisedb » Postgres Advanced Server » Version: 12.3.4

cpe:2.3:a:enterprisedb:postgres_advanced_server:12.3.4
Enterprisedb » Postgres Advanced Server » Version: 12.4.5

cpe:2.3:a:enterprisedb:postgres_advanced_server:12.4.5
Enterprisedb » Postgres Advanced Server » Version: 12.5.6

cpe:2.3:a:enterprisedb:postgres_advanced_server:12.5.6
Enterprisedb » Postgres Advanced Server » Version: 12.6.7

cpe:2.3:a:enterprisedb:postgres_advanced_server:12.6.7
Enterprisedb » Postgres Advanced Server » Version: 12.7.0

cpe:2.3:a:enterprisedb:postgres_advanced_server:12.7.0
Enterprisedb » Postgres Advanced Server » Version: 12.7.10

cpe:2.3:a:enterprisedb:postgres_advanced_server:12.7.10
Enterprisedb » Postgres Advanced Server » Version: 12.8.12

cpe:2.3:a:enterprisedb:postgres_advanced_server:12.8.12
Enterprisedb » Postgres Advanced Server » Version: 12.9.13

cpe:2.3:a:enterprisedb:postgres_advanced_server:12.9.13
Enterprisedb » Postgres Advanced Server » Version: 13.0.0

cpe:2.3:a:enterprisedb:postgres_advanced_server:13.0.0
Enterprisedb » Postgres Advanced Server » Version: 13.1.4

cpe:2.3:a:enterprisedb:postgres_advanced_server:13.1.4
Enterprisedb » Postgres Advanced Server » Version: 13.10.14

cpe:2.3:a:enterprisedb:postgres_advanced_server:13.10.14
Enterprisedb » Postgres Advanced Server » Version: 13.12.16

cpe:2.3:a:enterprisedb:postgres_advanced_server:13.12.16
Enterprisedb » Postgres Advanced Server » Version: 13.2.5

cpe:2.3:a:enterprisedb:postgres_advanced_server:13.2.5
Enterprisedb » Postgres Advanced Server » Version: 13.3.6

cpe:2.3:a:enterprisedb:postgres_advanced_server:13.3.6
Enterprisedb » Postgres Advanced Server » Version: 13.3.7

cpe:2.3:a:enterprisedb:postgres_advanced_server:13.3.7
Enterprisedb » Postgres Advanced Server » Version: 13.4.8

cpe:2.3:a:enterprisedb:postgres_advanced_server:13.4.8
Enterprisedb » Postgres Advanced Server » Version: 13.5.9

cpe:2.3:a:enterprisedb:postgres_advanced_server:13.5.9
Enterprisedb » Postgres Advanced Server » Version: 13.6.10

cpe:2.3:a:enterprisedb:postgres_advanced_server:13.6.10
Enterprisedb » Postgres Advanced Server » Version: 13.7.11

cpe:2.3:a:enterprisedb:postgres_advanced_server:13.7.11
Enterprisedb » Postgres Advanced Server » Version: 13.8.12

cpe:2.3:a:enterprisedb:postgres_advanced_server:13.8.12
Enterprisedb » Postgres Advanced Server » Version: 13.9.13

cpe:2.3:a:enterprisedb:postgres_advanced_server:13.9.13
Enterprisedb » Postgres Advanced Server » Version: 14.0.0

cpe:2.3:a:enterprisedb:postgres_advanced_server:14.0.0
Enterprisedb » Postgres Advanced Server » Version: 14.1.0

cpe:2.3:a:enterprisedb:postgres_advanced_server:14.1.0
Enterprisedb » Postgres Advanced Server » Version: 14.2.1

cpe:2.3:a:enterprisedb:postgres_advanced_server:14.2.1
Enterprisedb » Postgres Advanced Server » Version: 14.3.0

cpe:2.3:a:enterprisedb:postgres_advanced_server:14.3.0
Enterprisedb » Postgres Advanced Server » Version: 14.4.0

cpe:2.3:a:enterprisedb:postgres_advanced_server:14.4.0
Enterprisedb » Postgres Advanced Server » Version: 14.5.0

cpe:2.3:a:enterprisedb:postgres_advanced_server:14.5.0
Enterprisedb » Postgres Advanced Server » Version: 14.6.0

cpe:2.3:a:enterprisedb:postgres_advanced_server:14.6.0
Enterprisedb » Postgres Advanced Server » Version: 14.7.0

cpe:2.3:a:enterprisedb:postgres_advanced_server:14.7.0
Enterprisedb » Postgres Advanced Server » Version: 15.0.0

cpe:2.3:a:enterprisedb:postgres_advanced_server:15.0.0
Enterprisedb » Postgres Advanced Server » Version: 8.2

cpe:2.3:a:enterprisedb:postgres_advanced_server:8.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-41119

Products

Pricing

Contact Us