NE
Product
Neo4j
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 3Low 0
Watch
Add Neo4j to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-1524 | 9.8 | Mar 11 | Auth misconfiguration when multiple providers enabled Affected: before 5.26.22; 2025.01.0 before 2026.02.0 |
| CVE-2021-34371 | 9.8 | Aug 5 | Neo4j through 3.4.18 (with the shell server enabled) exposes an RMI service that arbitrarily deserializes Java objects, e.g., through setSessionVariable Affected: through 3.4.18 |
| CVE-2018-18389 | 9.8 | Oct 16 | Due to incorrect access control in Neo4j Enterprise Database Server 3.4.x before 3.4.9, the setting of LDAP for authentication with STARTTLS, and System Account for authorization,… Affected: 3.4.0 before 3.4.9 |
Showing 3