pljava project pljava vulnerabilities

Latest pljava project pljava CVEs

Newest publication first

1. CVE-2016-2192 PostgreSQL PL/Java before 1.5.0 allows remote authenticated users to alter type mappings for types they do not own.

   Published 2017-06-06

   Medium·CVSS 6.5

   PostgreSQL PL/Java before 1.5.0 allows remote authenticated users to alter type mappings for types they do not own.

2. CVE-2016-0767 PostgreSQL PL/Java Improper Privilege Management

   Published 2017-06-06

   Medium·CVSS 6.5

   PostgreSQL PL/Java before 1.5.0 allows remote authenticated users with USAGE permission on the public schema to alter the public schema classpath.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.