Read the docs

neo4j

Records23All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

neo4j records in CISA KEV

No neo4j vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Neo4j 9 records MEDIUM Awesome Procedures On Cyper 3 records MEDIUM Awesome Procedures 1 record MEDIUM Awesome Procedures On Cypher 1 record LOW Graph Databse 1 record MEDIUM

Records

3 records in Awesome Procedures On Cyper · all components

TI-2018-16042 CVE-2018-1000820 · GHSA-r2pp-x4mm-4999

neo4j-contrib neo4j-apoc-procedures version before commit 45bc09c contains a XML External…

Priority MEDIUM 47

neo4j-contrib neo4j-apoc-procedures version before commit 45bc09c contains a XML External Entity (XXE) vulnerability in XML Parser that can result in Disclosure of confidential data, denial of service, SSRF, port scannin…

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01873 Published 2018-12-20 Fixed in 3.4.0.4 CWE-611
TI-2023-09724 CVE-2023-23926 · GHSA-6wxg-wh7f-rqpr

XML external entity injection in neo4j apoc

Priority LOW 37

APOC (Awesome Procedures on Cypher) is an add-on library for Neo4j.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00889 Published 2023-02-16 Fixed in 4.4.0.14, 5.5.0 CWE-611
TI-2022-07589 CVE-2022-23532 · GHSA-5v8v-gwmw-qw97

neo4j-apoc-procedures is vulnerable to path traversal

Priority LOW 32

APOC (Awesome Procedures on Cypher) is an add-on library for Neo4j that provides hundreds of procedures and functions.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00689 Published 2023-01-14 Fixed in 4.3.0.12, 4.4.0.12 CWE-22
Open these records in search →