postgresql-jdbc (SUSE:Manager Server Module 4.0) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Manager Server Module 4.0 package postgresql-jdbc, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2018-10936 — CVSS 8.1 (high): A weakness was found in postgresql-jdbc before version 42.2.5. It was possible to provide an SSL Factory and not check the host name if a…
• CVE-2020-13692 — CVSS 7.7 (high): PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE.