neo4j Vulnerabilities and Affected Products
Vulnerabilities associated with Neo4j.
Products
Clear product- Enterprise Edition8 vulnerabilities
- Community Edition4 vulnerabilities
- apoc1 vulnerability
- graphql1 vulnerability
- Neo4j1 vulnerability
- neo4j-cypher MCP server1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-34517MEDIUM | Neo4j Cypher component mishandles IMMUTABLE privilegesThe Cypher component in Neo4j 5.0.0 through 5.18 mishandles IMMUTABLE privileges in some situations where an attacker already has admin access. | CVSS6.5v3.1 | EPSS0.625% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |