Read the docs

Palantir

Records47All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

Palantir records in CISA KEV

No Palantir vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Foundry Issues 3 records LOW Gotham 3 records MEDIUM Foundry 2 records LOW Foundry Comments 2 records LOW Foundry Frontend 2 records LOW Apollo Autopilot 1 record LOW Atlasdb 1 record LOW Clips2 1 record MEDIUM

Records

2 records in Foundry · all components

TI-2023-08988 CVE-2023-22833 · GHSA-rp5m-xq4p-5f64

Mandatory control bypass in Lime2

Priority LOW 39

Palantir Foundry deployments running Lime2 versions between 2.519.0 and 2.532.0 were vulnerable a bug that allowed authenticated users within a Foundry organization to bypass discretionary or mandatory access controls un…

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00408 Published 2023-06-06 Fixed in 2.532.0 CWE-304
TI-2023-14709 CVE-2023-30952 · GHSA-f7vf-674j-p83m

Foundry Issues reporterPath phishing by parameter injection

Priority LOW 23

A security defect was discovered in Foundry Issues that enabled users to create convincing phishing links by editing the request sent when creating an Issue.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00437 Published 2023-08-03 Fixed in 6.228.0 CWE-20
Open these records in search →