Vendors / Palantir Records 47 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4
CVSS high 9
Exploited now Palantir records in CISA KEV No Palantir vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 40
Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would load portions of maliciously crafted zip files to memory.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00616 · Published 2023-02-16 · Fixed in 3.22.11.2 CWE-20
Priority MEDIUM 40
Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would have allowed an attacker to exhaust the memory of the Gotham dispatch service.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00616 · Published 2023-02-16 · Fixed in 3.22.11.2 CWE-20
Priority LOW 30
Palantir Gotham included an unauthenticated endpoint that listed all active usernames on the stack with an active session.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00427 · Published 2023-02-16 · Fixed in 3.22.10.4 CWE-200
Open these records in search → All records by CVSS severity
4 9 32 2 0
