Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: neo4j Component: Awesome Procedures On Cyper Clear all filters
TI-2023-09724 CVE-2023-23926 · GHSA-6wxg-wh7f-rqpr

XML external entity injection in neo4j apoc

Priority LOW 37

APOC (Awesome Procedures on Cypher) is an add-on library for Neo4j.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00889 Published 2023-02-16 Fixed in 4.4.0.14, 5.5.0 CWE-611
TI-2022-07589 CVE-2022-23532 · GHSA-5v8v-gwmw-qw97

neo4j-apoc-procedures is vulnerable to path traversal

Priority LOW 32

APOC (Awesome Procedures on Cypher) is an add-on library for Neo4j that provides hundreds of procedures and functions.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00689 Published 2023-01-14 Fixed in 4.3.0.12, 4.4.0.12 CWE-22
TI-2018-16042 CVE-2018-1000820 · GHSA-r2pp-x4mm-4999

neo4j-contrib neo4j-apoc-procedures version before commit 45bc09c contains a XML External…

Priority MEDIUM 47

neo4j-contrib neo4j-apoc-procedures version before commit 45bc09c contains a XML External Entity (XXE) vulnerability in XML Parser that can result in Disclosure of confidential data, denial of service, SSRF, port scannin…

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01873 Published 2018-12-20 Fixed in 3.4.0.4 CWE-611