İçeriğe atla
Noroxi

neo4j kayıtları

neo4j üreticisine ait 15 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%100
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 21
  3. 22
  4. 23
  5. 24
  6. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

15 kayıt
  • CVE-2021-34371
    43Planlayın

    Neo4j through 3.4.18 (with the shell server enabled) exposes an RMI service that arbitrarily deserializes Java objects, e.g., through setSes

    KritikCVSS 9,8Kavram kanıtıEPSS %13

    neo4j · neo4j5 Ağu 2021

  • CVE-2018-1000820
    41Planlayın

    neo4j-contrib neo4j-apoc-procedures version before commit 45bc09c contains a XML External Entity (XXE) vulnerability in XML Parser that can

    KritikCVSS 10,0İstismar yokEPSS %1

    neo4j · awesome procedures on cyper20 Ara 2018

  • CVE-2018-18389
    40Planlayın

    Due to incorrect access control in Neo4j Enterprise Database Server 3.4.x before 3.4.9, the setting of LDAP for authentication with STARTTLS

    KritikCVSS 9,8İstismar yokEPSS %1

    neo4j · neo4j16 Eki 2018

  • CVE-2021-42767
    36İzleyin

    A directory traversal vulnerability in the apoc plugins in Neo4J Graph database before 4.4.0.1 allows attackers to read local files, and som

    KritikCVSS 9,1İstismar yokEPSS %1

    neo4j · awesome procedures28 Şub 2022

  • CVE-2021-34802
    35İzleyin

    A failure in resetting the security context in some transaction actions in Neo4j Graph Database 4.2 and 4.3 could allow authenticated users

    YüksekCVSS 8,8İstismar yokEPSS %1

    neo4j · graph databse30 Tem 2021

  • CVE-2023-23926
    32İzleyin

    APOC (Awesome Procedures on Cypher) is an add-on library for Neo4j.

    YüksekCVSS 8,1İstismar yokEPSS %0

    neo4j · awesome procedures on cyper16 Şub 2023

  • CVE-2022-37423
    30İzleyin

    Neo4j APOC (Awesome Procedures on Cypher) before 4.3.0.7 and 4.x before 4.4.0.8 allows Directory Traversal to sibling directories via apoc.l

    YüksekCVSS 7,5İstismar yokEPSS %1

    neo4j · awesome procedures on cypher12 Ağu 2022

  • CVE-2013-7259
    27İzleyin

    Multiple cross-site request forgery (CSRF) vulnerabilities in Neo4J 1.9.2 allow remote attackers to hijack the authentication of administrat

    OrtaCVSS 6,8İstismar yokEPSS %1

    neo4j · neo4j29 Nis 2014

  • CVE-2022-23532
    26İzleyin

    neo4j-apoc-procedures is vulnerable to path traversal

    OrtaCVSS 6,5İstismar yokEPSS %0

    neo4j · awesome procedures on cyper13 Oca 2023

  • CVE-2024-34517
    26İzleyin

    The Cypher component in Neo4j 5.0.0 through 5.18 mishandles IMMUTABLE privileges in some situations where an attacker already has admin acce

    OrtaCVSS 6,5İstismar yokEPSS %0

    neo4j · neo4j7 May 2024

  • CVE-2026-14587
    22İzleyin

    Unathenticated connection can hold Bolt channel open

    OrtaCVSS 5,5İstismar yokEPSS %0

    neo4j · neo4j5 Ağu 2026

  • CVE-2026-1524
    8İzleyin

    Auth misconfiguration when multiple providers enabled

    DüşükCVSS 2,1İstismar yokEPSS %0

    neo4j · neo4j11 Mar 2026

  • CVE-2026-1471
    8İzleyin

    Caching of authentication context

    DüşükCVSS 2,1İstismar yokEPSS %0

    neo4j · neo4j11 Mar 2026

  • CVE-2026-1497
    8İzleyin

    Incorrect privilege assignment in composite databases

    DüşükCVSS 2,0İstismar yokEPSS %0

    neo4j · neo4j11 Mar 2026

  • CVE-2026-1337
    4İzleyin

    Insufficient escaping of unicode characters in query log

    DüşükCVSS 1,1Kavram kanıtıEPSS %0

    neo4j · neo4j6 Şub 2026