Palantir

Records47All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

Palantir records in CISA KEV

No Palantir vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Foundry Issues 3 records LOW Gotham 3 records MEDIUM Foundry 2 records LOW Foundry Comments 2 records LOW Foundry Frontend 2 records LOW Apollo Autopilot 1 record LOW Atlasdb 1 record LOW Clips2 1 record MEDIUM

Records

3 records in Foundry Issues · all components

TI-2023-08990 CVE-2023-22835 · GHSA-cgfq-w4p2-w773

Denial of Service in Foundry Issues

LOW 35

A security defect was identified that enabled a user of Foundry Issues to perform a Denial of Service attack by submitting malformed data in an Issue that caused loss of frontend functionality to all issue participants.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00686 Published 2023-07-10 Fixed in 6.228.0, 2.510.0 CWE-20

TI-2022-10768 CVE-2022-27888 · GHSA-cwq5-9fp6-j489

The Foundry Issues service was found to be logging in a manner that captured session tokens.

LOW 24

Foundry Issues service versions 2.244.0 to 2.249.0 was found to be logging in a manner that captured sensitive information (session tokens).

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00233 Published 2022-04-26 No fix listed CWE-532

TI-2023-14704 CVE-2023-30946 · GHSA-63fq-r3mp-fpcf

Issues notification metadata lacks authorization

LOW 20

A security defect was identified in Foundry Issues.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00393 Published 2023-06-29 Fixed in 2.497.0 CWE-288

Open these records in search →

Critical	4
High	9
Medium	32
Low	2
No CVSS	0