CVE catalog

CVE-2025-12764

pgadmin4-9.11-1.1 on GA media

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.48% · Oct 25, 2026

This update for pgadmin4 fixes the following issues: - CVE-2025-12765: insufficient checks in the LDAP authentication flow allow a for bypass of TLS certificate validation that can lead to the stealing of bind credentials and the altering of directory responses (bsc#1253478). - CVE-2025-12764: improper validation of characters in a username allows for LDAP injections that force the processing of unusual amounts of data and leads to a DoS (bsc#1253477).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Susepgadmin4linux enterprise module for python 3 15 sp74.30-150300.3.21.1fixed
Susepgadmin4linux enterprise high performance computing 15 sp4-espos4.30-150300.3.21.1fixed
Susepgadmin4linux enterprise high performance computing 15 sp4-ltss4.30-150300.3.21.1fixed
Susepgadmin4linux enterprise high performance computing 15 sp5-espos4.30-150300.3.21.1fixed
Susepgadmin4linux enterprise high performance computing 15 sp5-ltss4.30-150300.3.21.1fixed
Susepgadmin4linux enterprise server 15 sp4-ltss4.30-150300.3.21.1fixed
Susepgadmin4linux enterprise server 15 sp5-ltss4.30-150300.3.21.1fixed
Susepgadmin4linux enterprise server 15 sp6-ltss4.30-150300.3.21.1fixed
Susepgadmin4linux enterprise server for sap applications 15 sp44.30-150300.3.21.1fixed
Susepgadmin4linux enterprise server for sap applications 15 sp54.30-150300.3.21.1fixed
Susepgadmin4linux enterprise server for sap applications 15 sp64.30-150300.3.21.1fixed
Susepgadmin4manager proxy lts 4.34.30-150300.3.21.1fixed
Susepgadmin4manager server lts 4.34.30-150300.3.21.1fixed
Susepgadmin4linux enterprise module for python 3 15 sp78.5-150600.3.18.1fixed
Susepgadmin4linux enterprise server 15 sp6-ltss8.5-150600.3.18.1fixed
Susepgadmin4linux enterprise server for sap applications 15 sp68.5-150600.3.18.1fixed
Opensusepgadmin4leap 15.68.5-150600.3.18.1fixed
Opensusepgadmin4tumbleweed9.11-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Susepgadmin4rpmlinux enterprise module for python 3 15 sp74.30-150300.3.21.1Not reportedSUSE-SU-2026:0016-1Not reported
Susepgadmin4rpmlinux enterprise high performance computing 15 sp4-espos4.30-150300.3.21.1Not reportedSUSE-SU-2026:0016-1Not reported
Susepgadmin4rpmlinux enterprise high performance computing 15 sp4-ltss4.30-150300.3.21.1Not reportedSUSE-SU-2026:0016-1Not reported
Susepgadmin4rpmlinux enterprise high performance computing 15 sp5-espos4.30-150300.3.21.1Not reportedSUSE-SU-2026:0016-1Not reported
Susepgadmin4rpmlinux enterprise high performance computing 15 sp5-ltss4.30-150300.3.21.1Not reportedSUSE-SU-2026:0016-1Not reported
Susepgadmin4rpmlinux enterprise server 15 sp4-ltss4.30-150300.3.21.1Not reportedSUSE-SU-2026:0016-1Not reported
Susepgadmin4rpmlinux enterprise server 15 sp5-ltss4.30-150300.3.21.1Not reportedSUSE-SU-2026:0016-1Not reported
Susepgadmin4rpmlinux enterprise server 15 sp6-ltss4.30-150300.3.21.1Not reportedSUSE-SU-2026:0016-1Not reported
Susepgadmin4rpmlinux enterprise server for sap applications 15 sp44.30-150300.3.21.1Not reportedSUSE-SU-2026:0016-1Not reported
Susepgadmin4rpmlinux enterprise server for sap applications 15 sp54.30-150300.3.21.1Not reportedSUSE-SU-2026:0016-1Not reported
Susepgadmin4rpmlinux enterprise server for sap applications 15 sp64.30-150300.3.21.1Not reportedSUSE-SU-2026:0016-1Not reported
Susepgadmin4rpmmanager proxy lts 4.34.30-150300.3.21.1Not reportedSUSE-SU-2026:0016-1Not reported
Susepgadmin4rpmmanager server lts 4.34.30-150300.3.21.1Not reportedSUSE-SU-2026:0016-1Not reported
Susepgadmin4rpmlinux enterprise module for python 3 15 sp78.5-150600.3.18.1Not reportedSUSE-SU-2026:0015-1Not reported
Susepgadmin4rpmlinux enterprise server 15 sp6-ltss8.5-150600.3.18.1Not reportedSUSE-SU-2026:0015-1Not reported
Susepgadmin4rpmlinux enterprise server for sap applications 15 sp68.5-150600.3.18.1Not reportedSUSE-SU-2026:0015-1Not reported
Opensusepgadmin4rpmleap 15.68.5-150600.3.18.1Not reportedSUSE-SU-2026:0015-1Not reported
Opensusepgadmin4rpmtumbleweed9.11-1.1Not reportedOPENSUSE-SU-2025:15818-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [pgadmin4-desktop]Unknown

    Source package: [pgadmin4]

    Details (1)

    • 9.17-1.1 · noarch · tumbleweed

      Unknown · Fixed: 9.11-1.1

      Version impact unknown

      pypi · pgadmin4 · opensuse · tumbleweed

  • [pgadmin4-doc]Unknown

    Source package: [pgadmin4]

    Details (1)

    • 9.17-1.1 · noarch · tumbleweed

      Unknown · Fixed: 9.11-1.1

      Version impact unknown

      pypi · pgadmin4 · opensuse · tumbleweed

  • [pgadmin4-web-uwsgi]Unknown

    Source package: [pgadmin4]

    Details (1)

    • 9.17-1.1 · noarch · tumbleweed

      Unknown · Fixed: 9.11-1.1

      Version impact unknown

      pypi · pgadmin4 · opensuse · tumbleweed

  • [system-user-pgadmin]Unknown

    Source package: [pgadmin4]

    Details (1)

    • 9.17-1.1 · noarch · tumbleweed

      Unknown · Fixed: 9.11-1.1

      Version impact unknown

      pypi · pgadmin4 · opensuse · tumbleweed

  • [pgadmin4]Fixed

    Source package: [pgadmin4]

    Details (1)

    • 9.17-1.1 · noarch · tumbleweed

      Fixed · Fixed: 9.11-1.1

      pypi · pgadmin4 · opensuse · tumbleweed

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]