Vendors / Weaviate Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 3
Exploited now Weaviate records in CISA KEV No Weaviate vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 79
Verba RAG application version 2.1.3 contains an unauthenticated server-side request forgery vulnerability that allows unauthenticated attackers to cause the backend to issue arbitrary HTTP GET requests by supplying attac…
CVSS 4.0 CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.00554 · Published 2026-07-21 · No fix listed CWE-918
Priority HIGH 79
Verba RAG application version 2.1.3 contains a server-side request forgery vulnerability combined with a same-origin middleware bypass that allows unauthenticated remote attackers to make the server issue arbitrary HTTP…
CVSS 4.0 CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.00608 · Published 2026-07-21 · No fix listed CWE-918
Priority HIGH 72
An issue in weaviate v.1.20.0 allows a remote attacker to cause a denial of service via the handleUnbatchedGraphQLRequest function.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.02137 · Published 2023-08-21 · Fixed in 1.20.6, 1.19.13 +1 CWE-617
Priority HIGH 70
A vulnerability has been found in Weaviate Verba up to 2.1.3.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00286 · Published 2026-10-04 · No fix listed CWE-200
Priority MEDIUM 41
Weaviate before 1.38.0 does not verify that a principal performing an RBAC role assignment holds the permissions granted by the assigned role.
CVSS 4.0 HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00711 · Published 2026-07-02 · Fixed in 1.38.0 CWE-266
Priority LOW 35
An issue was discovered in Weaviate OSS before 1.33.4.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00905 · Published 2025-12-12 · Fixed in 1.30.20, 1.31.19 +2 CWE-22
Priority LOW 23
An issue was discovered in Weaviate OSS before 1.33.4.
CVSS 3.1 MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00502 · Published 2025-12-12 · Fixed in 1.30.20, 1.31.19 +2 CWE-22
Open these records in search → All records by CVSS severity
2 3 2 0 0
THREATIST.IORead the docs