greenplum records
2 published records for vendor greenplum.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-532 Insertion of Sensitive Information into Log File1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
2 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
37Monitor | CVE-2021-22028No exploit | In versions of Greenplum database prior to 5.28.6 and 6.14.0, greenplum database contains a file path traversal vulnerability leading to infgreenplum · greenplum · CWE-22 | Critical9.1 | 2.4%Nov 19, 2021 |
26Monitor | CVE-2021-22030No exploit | In versions of Greenplum database prior to 5.28.14 and 6.17.0, certain statements execution led to the storage of sensitive(credential) infogreenplum · greenplum · CWE-532 | Medium6.5 | 1.0%Nov 19, 2021 |
- CVE-2021-2202837Monitor
In versions of Greenplum database prior to 5.28.6 and 6.14.0, greenplum database contains a file path traversal vulnerability leading to inf
CriticalCVSS 9.1No exploitEPSS 2%greenplum · greenplumNov 19, 2021
- CVE-2021-2203026Monitor
In versions of Greenplum database prior to 5.28.14 and 6.17.0, certain statements execution led to the storage of sensitive(credential) info
MediumCVSS 6.5No exploitEPSS 1%greenplum · greenplumNov 19, 2021