Description
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 3 | pgadmin4 | 8.5-150600.3.6.1 | SUSE-SU-2024:3771-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.6 | pgadmin4 | 8.5-150600.3.6.1 | SUSE-SU-2024:3771-1 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 1 repository
-
c4bsec/PP_CVE-2024-38998 ★ 1 · Jan 8, 2025
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 8
- SUSE-SU-2024:3771-1 Security update for pgadmin4 SUSE / openSUSE Security Updates · Feb 4, 2026
- NCSC-2025-0027 Kwetsbaarheden verholpen in Oracle Fusion Middleware NCSC-NL (Netherlands) · Jan 22, 2025
- NCSC-2025-0025 Kwetsbaarheden verholpen in Oracle Financial Services NCSC-NL (Netherlands) · Jan 22, 2025
- NCSC-2025-0023 Kwetsbaarheden verholpen in Oracle PeopleSoft NCSC-NL (Netherlands) · Jan 22, 2025
- NCSC-2025-0022 Kwetsbaarheden verholpen in Oracle Enterprise Manager NCSC-NL (Netherlands) · Jan 22, 2025
- NCSC-2025-0021 Kwetsbaarheden verholpen in Oracle Communications NCSC-NL (Netherlands) · Jan 22, 2025
- NCSC-2025-0020 Kwetsbaarheden verholpen in Oracle Database producten NCSC-NL (Netherlands) · Jan 22, 2025
- NCSC-2024-0411 Kwetsbaarheden verholpen in Oracle Database producten NCSC-NL (Netherlands) · Oct 17, 2024