İçeriğe atla
Noroxi

Palantir kayıtları

palantir üreticisine ait 33 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%63,6
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 22
  2. 23
  3. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Bug bounty kapsamı

Ürünün üreticisi herkese açık bir programda görünüyor. Eşleşme ad üzerinden yapıldı; kapsam metnini programda doğrulayın.

Tüm kayıtlar

33 kayıt
  • CVE-2023-30945
    39İzleyin

    Multiple Services such as VHS(Video History Server) and VCD(Video Clip Distributor) and Clips2 were discovered to be vulnerable to an unauth

    KritikCVSS 9,8İstismar yokEPSS %0

    palantir · clips226 Haz 2023

  • CVE-2022-27889
    36İzleyin

    The Foundry Multipass service contains code paths that could be abused to cause a denial of service for authentication and authorization operations.

    KritikCVSS 9,1İstismar yokEPSS %0

    palantir · foundry multipass14 Haz 2022

  • CVE-2023-30967
    30İzleyin

    Gotham Orbital Simulator path traversal

    YüksekCVSS 7,5İstismar yokEPSS %0

    palantir · orbital simulator25 Eki 2023

  • CVE-2023-22835
    30İzleyin

    Denial of Service in Foundry Issues

    YüksekCVSS 7,7İstismar yokEPSS %0

    palantir · foundry frontend10 Tem 2023

  • CVE-2022-27892
    30İzleyin

    Palantir Gotham included an endpoint that would log arbitrary sized payloads.

    YüksekCVSS 7,5İstismar yokEPSS %0

    palantir · gotham16 Şub 2023

  • CVE-2022-27897
    30İzleyin

    Palantir Gotham included an endpoint that would log arbitrary sized zip files.

    YüksekCVSS 7,5İstismar yokEPSS %0

    palantir · gotham16 Şub 2023

  • CVE-2022-27896
    30İzleyin

    The Foundry Code-Workbooks service was found to contain an issue leading to information disclosure.

    YüksekCVSS 7,5İstismar yokEPSS %0

    palantir · foundry code-workbooks14 Kas 2022

  • CVE-2022-27895
    30İzleyin

    A component in Foundry logging was found to be capturing sensitive information in logs.

    YüksekCVSS 7,5İstismar yokEPSS %0

    palantir · foundry build215 Kas 2022

  • CVE-2022-27890
    29İzleyin

    It was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory

    YüksekCVSS 7,4İstismar yokEPSS %0

    palantir · atlasdb16 Şub 2023

  • CVE-2022-48306
    27İzleyin

    Gotham Chat IRC help does not validate hostnames in TLS certificates

    OrtaCVSS 6,8İstismar yokEPSS %0

    palantir · gotham chat irc16 Şub 2023

  • CVE-2023-30970
    26İzleyin

    Gotham table and Forward App Path traversal

    OrtaCVSS 6,5İstismar yokEPSS %0

    palantir · gotham blackbird-witchcraft29 Oca 2024

  • CVE-2023-30948
    26İzleyin

    Retrieval of Attachments to Comments lacks Authorization

    OrtaCVSS 6,5İstismar yokEPSS %0

    palantir · foundry comments6 Haz 2023

  • CVE-2023-30951
    26İzleyin

    The Foundry Magritte plugin rest-source was found to be vulnerable to an an XML external Entity attack (XXE).

    OrtaCVSS 6,5İstismar yokEPSS %0

    palantir · magritte-rest-source-bundle3 Ağu 2023

  • CVE-2023-30969
    26İzleyin

    Palantir Tiles missing authentication on API endpoints

    OrtaCVSS 6,5İstismar yokEPSS %0

    palantir · tiles25 Eki 2023

  • CVE-2023-22833
    26İzleyin

    Mandatory control bypass in Lime2

    OrtaCVSS 6,5İstismar yokEPSS %0

    palantir · foundry6 Haz 2023

  • CVE-2023-30961
    24İzleyin

    Palantir Gotham UI bug that could lead to incorrect data classification

    OrtaCVSS 6,1İstismar yokEPSS %0

    palantir · gotham-fe-bundle27 Eyl 2023

  • CVE-2023-30950
    23İzleyin

    The foundry campaigns service was found to be vulnerable to an unauthenticated information disclosure in a rest endpoint

    OrtaCVSS 5,9İstismar yokEPSS %0

    palantir · foundry campaigns3 Ağu 2023

  • CVE-2022-27888
    22İzleyin

    The Foundry Issues service was found to be logging in a manner that captured session tokens.

    OrtaCVSS 5,5İstismar yokEPSS %0

    palantir · foundry issues26 Nis 2022

  • CVE-2023-30956
    21İzleyin

    IDOR in Foundry Comments allows retrieval of attachments

    OrtaCVSS 5,3İstismar yokEPSS %0

    palantir · foundry comments10 Tem 2023

  • CVE-2022-27891
    21İzleyin

    Palantir Gotham included an unauthenticated endpoint that listed all active usernames in the platform with an active session.

    OrtaCVSS 5,3İstismar yokEPSS %0

    palantir · gotham16 Şub 2023

  • CVE-2022-27894
    21İzleyin

    The Foundry Blobster service was found to have a cross-site scripting (XSS) vulnerability.

    OrtaCVSS 5,4İstismar yokEPSS %0

    palantir · foundry blobster4 Kas 2022

  • CVE-2023-30963
    21İzleyin

    Stored XSS in Foundry Slate Query Dropdown menu

    OrtaCVSS 5,4İstismar yokEPSS %0

    palantir · foundry frontend10 Tem 2023

  • CVE-2023-30962
    21İzleyin

    Stored XSS in cerberus attachments

    OrtaCVSS 5,4İstismar yokEPSS %0

    palantir · gotham cerberus12 Eyl 2023

  • CVE-2023-30955
    21İzleyin

    Foundry workspace-server Developer Mode Authorization Bypass

    OrtaCVSS 5,4İstismar yokEPSS %0

    palantir · foundry workspace-server29 Haz 2023

  • CVE-2023-30959
    21İzleyin

    Stored XSS via javascript URI in Apollo Change Requests comment

    OrtaCVSS 5,4İstismar yokEPSS %0

    palantir · apollo autopilot27 Eyl 2023