Vulnerabilities in Neo4j

12 results

Vexday analysis

Neo4j apresenta um perfil de risco baixo com apenas 2 vulnerabilidades conhecidas e nenhuma sob exploração ativa. Não há vulnerabilidades críticas registradas, e a ausência de publicações recentes indica estabilidade relativa da plataforma. A fraqueza dominante (CWE-471 - Modification of Assumed-Immutable Data) sugere riscos moderados relacionados à integridade de dados, mas sem urgência de remediação.

CVE-2023-23926MEDIUMAPOC (Awesome Procedures on Cypher) is an add-on library for Neo4j. An XML External Entity (XXE) vulnerability found in the apoc.import.grapEPSS 0.9%CVE-2024-34517MEDIUMThe Cypher component in Neo4j 5.0.0 through 5.18 mishandles IMMUTABLE privileges in some situations where an attacker already has admin acceEPSS 0.6%CVE-2025-12738LOWEnumeration of restricted property valueEPSS 0.4%CVE-2026-14587MEDIUMUnathenticated connection can hold Bolt channel openEPSS 0.4%CVE-2026-5423HIGHSubscription Authentication Bypass via Unverified connectionParams.jwtEPSS 0.3%CVE-2026-1524LOWAuth misconfiguration when multiple providers enabledEPSS 0.3%CVE-2025-11602MEDIUMUntargeted information leak in Bolt protocol handshakeEPSS 0.3%CVE-2026-1471LOWCaching of authentication contextEPSS 0.2%CVE-2026-1497LOWIncorrect privilege assignment in composite databasesEPSS 0.2%CVE-2026-1337LOWInsufficient escaping of unicode characters in query logEPSS 0.2%CVE-2025-10193HIGHNeo4j Cypher MCP server is vulnerable to DNS rebinding attacksEPSS 0.2%CVE-2026-1622MEDIUMUnredacted data exposure in query.logEPSS 0.1%