Advisories · Technology

neo4j Enterprise Edition.

Every CVE that names neo4j Enterprise Edition among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-14587 CVE record

CVSS 5.5 Medium

Unathenticated connection can hold Bolt channel open
- neo4j Enterprise Edition
- neo4j Community Edition
- CWE-130
Not analysed yet 5 Aug 2026
CVE-2026-1471 CVE record

CVSS 2.1 Low

Caching of authentication context
- Neo4j Enterprise edition
- Broken access control
Not analysed yet 11 Mar 2026
CVE-2026-1524 CVE record

CVSS 2.1 Low

Auth misconfiguration when multiple providers enabled
- neo4j Enterprise Edition
- Authentication bypass
- Broken access control
Not analysed yet 11 Mar 2026
CVE-2026-1497 CVE record

CVSS 2.0 Low

Incorrect privilege assignment in composite databases
- neo4j Enterprise Edition
- Broken access control
Not analysed yet 11 Mar 2026
CVE-2025-12738 CVE record

CVSS 1.3 Low

Enumeration of restricted property value
- neo4j Enterprise Edition
- Information disclosure
Not analysed yet 22 Jan 2026
CVE-2025-11602 CVE record

CVSS 6.3 Medium

Untargeted information leak in Bolt protocol handshake
- neo4j Enterprise Edition
- neo4j Community Edition
- CWE-226
Not analysed yet 31 Oct 2025