Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-8713

18
FAUCET Score

CVE-2025-8713 is a low-severity vulnerability in PostgreSQL versions prior to 17.6, 16.10, 15.14, 14.19, and 13.22. It allows an authenticated user with low privileges to bypass view access controls and row security policies by crafting a leaky operator, thereby reading sampled data from optimizer statistics that should be inaccessible. The attack vector is network-based with high attack complexity, resulting in a low impact on confidentiality and no impact on integrity or availability. There is currently no public exploit code available, it is not being actively exploited, and community discussion and media coverage are minimal.

Impacted Technologies

VendorProductVersion(s)CPE
N/APostgreSQL
>= 0, < 13.22, >= 14, < 14.19, >= 15, < 15.14, >= 16, < 16.10, >= 17, < 17.6CNA affecteddefault unaffected

CVSS Data

CVSS version used by this source: 3.1

3.1LOW

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
Exploitability Score
1.6
Impact Score
1.4
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.22%
Probability of exploitation in next 30 days
EPSS Percentile
12.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0022 is in the 4th percentile among its peer group of 1,638 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (35)

beckhoffpatch availablevia llm_extracted
Fixed in: 17.6, 16.10, 15.14, 14.19
View patch
dhis2patch availablevia llm_extracted
Fixed in: 17.6, 16.10, 15.14, 14.19
View patch
fortinetpatch availablevia llm_extracted
Fixed in: 17.6, 16.10, 15.14, 14.19
View patch
microsoftpatch availablevia msrc
Product: 19600-17084Fixed in: 16.10-1
microsoftpatch availablevia msrc
Product: 20267-17086Fixed in: 14.19-1
microsoftpatch availablevia msrc
Product: azl3 postgresql 16.9-1 on Azure Linux 3.0Fixed in: 16.10-1
microsoftpatch availablevia msrc
Product: cbl2 postgresql 14.18-1 on CBL Mariner 2.0Fixed in: 14.19-1
miniopatch availablevia llm_extracted
Fixed in: 17.6, 16.10, 15.14, 14.19
View patch
navidromepatch availablevia llm_extracted
Fixed in: 17.6, 16.10, 15.14, 14.19
View patch
netscoutpatch availablevia llm_extracted
Fixed in: 17.6, 16.10, 15.14, 14.19
View patch
new_relicpatch availablevia llm_extracted
Fixed in: 17.6, 16.10, 15.14, 14.19
View patch
nvidiapatch availablevia llm_extracted
Fixed in: 17.6, 16.10, 15.14, 14.19
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: postgresql-0:13.22-1.el9_6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsFixed in: postgresql-0:13.22-1.el9_0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsFixed in: postgresql-0:13.22-1.el9_2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsFixed in: postgresql:15-9020020250815141744.rhel9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: postgresql:15-9040020250818140154.rhel9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: postgresql:16-9040020250818135852.rhel9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: postgresql-0:13.22-1.el9_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.8 Telecommunications Update ServiceFixed in: postgresql:15-8080020250815150643.63b34585
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.8 Update Services for SAP SolutionsFixed in: postgresql:13-8080020250819150623.63b34585
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.8 Update Services for SAP SolutionsFixed in: postgresql:15-8080020250815150643.63b34585
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: postgresql:16-9060020250817200213.rhel9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: postgresql:15-9060020250817180313.rhel9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Telecommunications Update ServiceFixed in: postgresql:13-8060020250825094024.ad008a3a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportFixed in: postgresql:13-8060020250825094024.ad008a3a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: postgresql:13-8040020250818170654.522a0ee4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsFixed in: postgresql:13-8060020250825094024.ad008a3a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.8 Telecommunications Update ServiceFixed in: postgresql:13-8080020250819150623.63b34585
View patch
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: postgresql
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: postgresql:12/postgresql
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: postgresql:16/postgresql
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: postgresql16
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: postgresql:15/postgresql
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: postgresql:13/postgresql

Vendor Advisories (10)

redhatCVE-2025-8713Low

postgresql: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table

Aug 14, 2025
microsoft2025-Aug/CVE-2025-8713Low

PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table

Aug 12, 2025
fortinetllm-fortinet-7c636f814105352fLOW

PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table

Jan 1, 2025
new_relicllm-new_relic-1945b92a2a3460e1LOW

PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table

dhis2llm-dhis2-3b78702eded82965LOW

PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table

miniollm-minio-b70b5e4b830f2d5dLOW

PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table

navidromellm-navidrome-8bdc3ed85177a7d0LOW

PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table

nvidiallm-nvidia-1ed5a524e260f47cLOW

PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table

beckhoffllm-beckhoff-235694848d2f9308LOW

PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table

netscoutllm-netscout-6d6e1dde45e8c347LOW

PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table

References

postgresql.org / support/security/CVE-2025-8713