Vulnerabilities

TI-2023-13019 CVE-2023-28479 · GHSA-5mr6-xj8v-67r4

An issue was discovered in Tigergraph Enterprise 3.7.0.

HIGH 73

An issue was discovered in Tigergraph Enterprise 3.7.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00827 Published 2023-08-15 No fix listed

TI-2023-13023 CVE-2023-28483 · GHSA-4cqx-cgrq-mp79

HIGH 73

An issue was discovered in Tigergraph Enterprise 3.7.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00894 Published 2023-08-14 No fix listed

TI-2023-13022 CVE-2023-28482 · GHSA-w5gp-4fqx-hg96

MEDIUM 62

An issue was discovered in Tigergraph Enterprise 3.7.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00656 Published 2023-08-14 No fix listed CWE-434

TI-2023-13021 CVE-2023-28481 · GHSA-p76w-g4qc-7g8w

HIGH 73

An issue was discovered in Tigergraph Enterprise 3.7.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00703 Published 2023-08-14 No fix listed CWE-639

TI-2023-13020 CVE-2023-28480 · GHSA-623r-phrv-g5p4

MEDIUM 62

An issue was discovered in Tigergraph Enterprise 3.7.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00644 Published 2023-08-14 No fix listed CWE-434

TI-2023-09081 CVE-2023-22950 · GHSA-xwhf-r489-w73v

LOW 30

An issue was discovered in TigerGraph Enterprise Free Edition 3.x.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00697 Published 2023-04-13 No fix listed CWE-669

TI-2023-09079 CVE-2023-22948 · GHSA-wf9j-m8jq-36qr

LOW 23

An issue was discovered in TigerGraph Enterprise Free Edition 3.x.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0044 Published 2023-04-13 No fix listed CWE-311

TI-2022-12566 CVE-2022-30331 · GHSA-56x5-64f5-4m37

MEDIUM 41

The User-Defined Functions (UDF) feature in TigerGraph 3.6.0 allows installation of a query (in the GSQL query language) without proper validation.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01288 Published 2022-09-05 No fix listed CWE-20