[{"CVE":"CVE-2020-13692","severity":"important","public_date":"2020-06-04T00:00:00Z","advisories":["RHSA-2020:3005","RHSA-2020:3248","RHSA-2020:3675","RHSA-2020:3285","RHSA-2020:3176","RHSA-2020:3286","RHSA-2020:3283","RHSA-2020:3284","RHSA-2020:3209","RHSA-2020:3678"],"bugzilla":"1852985","bugzilla_description":"CVE-2020-13692 postgresql-jdbc: XML external entity (XXE) vulnerability in PgSQLXML","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":["postgresql-jdbc-0:9.2.1002-8.el7_8","postgresql-jdbc-0:8.4.704-4.el6_10","postgresql-jdbc-0:42.2.3-3.el8_0","postgresql-jdbc-0:42.2.3-3.el8_1","postgresql-jdbc-0:42.2.3-3.el8_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13692.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H","cvss3_score":"7.7"},{"CVE":"CVE-2018-10936","severity":"low","public_date":"2018-08-27T00:00:00Z","advisories":[],"bugzilla":"1622225","bugzilla_description":"CVE-2018-10936 PostgreSQL: Postgres JDBC driver does not perform host name validation by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-297","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10936.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"},{"CVE":"CVE-2012-1618","severity":null,"public_date":"2012-03-25T00:00:00Z","advisories":[],"bugzilla":"807394","bugzilla_description":"CVE-2012-1618 postgresql-jdbc: SQL injection due improper escaping of JDBC statement parameters","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1618.json"}]