Veeam Backup & Replication • How risky is running the pre-installed Postgresql without updates really?

Hello,

i am a big fan of updating everything that can pose a security risk and i have seen a lot of Veeam users unhappy with the decision to pre-install Postgresql. I just wonder: Is there a realistic attack scenario where the Postgresql server causes a security risk?

When the Veeam system is non Domain-Joined, Postgresql only listens on localhost (from what i see this is the default setting) and Veeam is on a dedicated server i currently do not see any way to attack that component - or do i miss something?

Markus

Statistics: Posted by mkretzer — Apr 07, 2025 4:36 pm

---