Skip to contentNeo4j Community Edition vulnerabilities
- neo4j, neo4j community edition, enterprise edition +2 moreUnathenticated connection can hold Bolt channel openCVE-2026-14587Fix available5.5 Medium
- neo4j community edition, neo4j, neo4j enterprise edition +2 moreInsufficient escaping of unicode characters in query logCVE-2026-1337Public exploitFix available1.1 Low
- neo4j community edition, enterprise edition +1 moreUnredacted data exposure in query.logCVE-2026-1622Fix available4.8 Medium
- cloudpanel community editionCloudPanel Community Edition HTTP Header users redirectCVE-2025-152415.1 Medium
- neo4j community edition, openclinica +1 moreOpenClinica Community Edition CRF Data Import ImportCRFData path traversalCVE-2025-129225.3 Medium
- neo4j community edition, openclinica +1 moreOpenClinica Community Edition CRF Data Import ImportCRFData xml injectionCVE-2025-129215.3 Medium
- logicaldoc community edition, logicaldoc +1 moreLogicalDOC Community Edition Admin Login login.jsp excessive authenticationCVE-2025-125476.3 Medium
- logicaldoc community edition, logicaldoc +1 moreLogicalDOC Community Edition API Key creation UI cross site scriptingCVE-2025-125465.1 Medium
- neo4j community edition, enterprise edition +1 moreUntargeted information leak in Bolt protocol handshakeCVE-2025-116026.3 Medium
- logicaldoc community edition, logicaldoc +1 moreLogicalDOC Community Edition Add Contact frontend.jsp cross site scriptingCVE-2025-119465.1 Medium
- mist community edition, mist +1 moreMist Community Edition Authentication Endpoint views.py login cross site scriptingCVE-2025-54125.1 Medium
- mist community edition, mist +1 moreMist Community Edition views.py tag_resources cross site scriptingCVE-2025-54115.1 Medium
- mist community edition, mist +1 moreMist Community Edition middleware.py session_start_response cross-site request forgeryCVE-2025-54105.3 Medium
- mist community edition, mist +1 moreMist Community Edition API Token views.py create_token access controlCVE-2025-54096.9 Medium