Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Weaviate records in CISA KEVNo Weaviate vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 72
An issue in weaviate v.1.20.0 allows a remote attacker to cause a denial of service via the handleUnbatchedGraphQLRequest function.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02137 · Published 2023-08-21 · Fixed in 1.20.6, 1.19.13 +1 CWE-617
Priority MEDIUM 41
Weaviate before 1.38.0 does not verify that a principal performing an RBAC role assignment holds the permissions granted by the assigned role.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00711 · Published 2026-07-02 · Fixed in 1.38.0 CWE-266
Priority LOW 35
An issue was discovered in Weaviate OSS before 1.33.4.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00905 · Published 2025-12-12 · Fixed in 1.30.20, 1.31.19 +2 CWE-22
Priority LOW 23
An issue was discovered in Weaviate OSS before 1.33.4.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00502 · Published 2025-12-12 · Fixed in 1.30.20, 1.31.19 +2 CWE-22
