Read the docs

Palantir

Records47All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

Palantir records in CISA KEV

No Palantir vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Foundry Issues 3 records LOW Gotham 3 records MEDIUM Foundry 2 records LOW Foundry Comments 2 records LOW Foundry Frontend 2 records LOW Apollo Autopilot 1 record LOW Atlasdb 1 record LOW Clips2 1 record MEDIUM

Records

1 record in Apollo Autopilot · all components

TI-2023-14714 CVE-2023-30959 · GHSA-j7m2-p3m3-hv6j

Stored XSS via javascript URI in Apollo Change Requests comment

Priority LOW 24

In Apollo change requests, comments added by users could contain a javascript URI link that when rendered will result in an XSS that require user interaction.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00359 Published 2023-09-26 Fixed in 3.308.0 CWE-84
Open these records in search →