Product by Neo4j
Enterprise Edition
8 known vulnerabilities in Enterprise Edition (Neo4j), 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-14587 | Unathenticated connection can hold Bolt channel open | 7.5 | |
| Critical | CVE-2026-1524 | Auth misconfiguration when multiple providers enabled | 9.8 | |
| High | CVE-2026-1497 | Incorrect privilege assignment in composite databases | 7.2 | |
| Medium | CVE-2026-1471 | Caching of authentication context | 6.5 | |
| Medium | CVE-2025-11602 | Untargeted information leak in Bolt protocol handshake | — | |
| Medium | CVE-2026-1337 | Insufficient escaping of unicode characters in query log | 5.4 | |
| Medium | CVE-2026-1622 | Unredacted data exposure in query.log | — | |
| Low | CVE-2025-12738 | Enumeration of restricted property value | — |