vesoft-inc

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

vesoft-inc records in CISA KEV

No vesoft-inc vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records

TI-2026-56042 CVE-2026-81032 · GHSA-c937-9ccf-7mq9

HIGH 81

NebulaGraph exposes its runtime configuration over an unauthenticated HTTP service.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00359 Published 2026-08-26 No fix listed CWE-306

TI-2023-18109 CVE-2023-36088 · GHSA-m28r-3xq9-r4pj

HIGH 72

Server Side Request Forgery (SSRF) vulnerability in NebulaGraph Studio version 3.7.0, allows remote attackers to gain sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00841 Published 2023-09-01 No fix listed CWE-918

TI-2024-31573 CVE-2024-47219 · GHSA-2gm9-phpp-rvm3

MEDIUM 51

An issue was discovered in vesoft NebulaGraph through 3.8.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01202 Published 2024-09-21 No fix listed CWE-94

TI-2024-31572 CVE-2024-47218 · GHSA-9p6f-43f7-gmq3

MEDIUM 50

An issue was discovered in vesoft NebulaGraph through 3.8.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00582 Published 2024-09-22 No fix listed CWE-287