Neo4j
Security Risk Profile
40
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 19 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 29, 2014 to present
19
Total CVEs
9
Critical+High
0
Exploited
5
Unpatched
Threat Assessment
Avg CVSS
6.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
5
Critical/High
Risk Level
40/100
medium
🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
4High
5Medium
6Low
4Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Path Traversal
3
2
XEE
2
3
XSS
1
4
Infoleak
1
5
SSRF
1
Most Affected Products
1. Neo4j Neo4j12
2. Neo4j Neo4j Enterprise Edition5
3. Neo4j Awesome Procedures On Cyper5
4. Neo4j Neo4j Community4
5. maven/org.neo4j:neo4j4
Recent Vulnerabilities
See more →CVE-2026-14587
CVSS 5.5medium
Unathenticated connection can hold Bolt channel open
8/5/2026🔧 No Patch
CVE-2026-1471
CVSS 2.1low
Caching of authentication context
3/11/2026🔧 No Patch
CVE-2026-1524
CVSS 2.1low
Auth misconfiguration when multiple providers enabled
3/11/2026🔧 No Patch
CVE-2026-1497
CVSS 2.0low
Incorrect privilege assignment in composite databases
3/11/2026🔧 No Patch
CVE-2026-1337
CVSS 5.4medium
Insufficient escaping of unicode characters in query log
2/6/2026
CVE-2026-1622
CVSS 4.8medium
Unredacted data exposure in query.log
2/4/2026
CVE-2025-12738
CVSS 1.3low
Enumeration of restricted property value
1/22/2026🔧 No Patch
CVE-2025-11602
CVSS 6.3medium
Untargeted information leak in Bolt protocol handshake
10/31/2025🔧 No Patch
CVE-2025-10193
CVSS 7.4high
Neo4j Cypher MCP server is vulnerable to DNS rebinding attacks
9/11/2025
CVE-2024-34517
CVSS 6.5EPSS 0%medium
5/7/2024
Monitor Neo4j in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.