Neo4j MCP Clients & Servers 安全漏洞

Neo4j MCP Clients & Servers is a protocol for managing large language model contexts in the Neo4j Contrib open source. A security vulnerability exists in Neo4j MCP Clients & Servers, which stems from a DNS rebinding vulnerability that could lead to bypassing same-origin policy protections and...

PT-2025-37184

Name of the Vulnerable Software and Affected Versions: Neo4j Cypher MCP server affected versions not specified Description: A DNS rebinding issue exists in the Neo4j Cypher MCP server. This allows malicious websites to circumvent Same-Origin Policy protections and execute unauthorized tool...

CVE-2025-56406

An issue was discovered in mcp-neo4j 0.3.0 allowing attackers to obtain sensitive information or execute arbitrary commands via the SSE service. NOTE: the Supplier's position is that authentication is not mandatory for MCP servers, and the mcp-neo4j MCP server is only intended for use in a local...

CVE-2025-56406

An issue was discovered in mcp-neo4j 0.3.0 allowing attackers to obtain sensitive information or execute arbitrary commands via the SSE service. NOTE: the Supplier's position is that authentication is not mandatory for MCP servers, and the mcp-neo4j MCP server is only intended for use in a local...

CVE-2025-56406

An issue was discovered in mcp-neo4j 0.3.0 allowing attackers to obtain sensitive information or execute arbitrary commands via the SSE service. NOTE: the Supplier's position is that authentication is not mandatory for MCP servers, and the mcp-neo4j MCP server is only intended for use in a local...

CVE-2025-56406

An issue was discovered in mcp-neo4j 0.3.0 allowing attackers to obtain sensitive information or execute arbitrary commands via the SSE service. NOTE: the Supplier's position is that authentication is not mandatory for MCP servers, and the mcp-neo4j MCP server is only intended for use in a local...

PT-2025-37048

Name of the Vulnerable Software and Affected Versions: mcp-neo4j version 0.3.0 Description: An issue was discovered that allows attackers to gain sensitive information or execute arbitrary commands via the SSE service. Recommendations: At the moment, there is no information about a newer version...

Neo4j MCP Clients & Servers 安全漏洞

Neo4j MCP Clients & Servers is a Neo4j Contrib open source protocol for managing large language model contexts. A security vulnerability exists in Neo4j MCP Clients & Servers version 0.3.0, which originates in the SSE service and could lead to the disclosure of sensitive information or the...

CVE-2025-58056 vulnerabilities

Vulnerabilities for packages: opensearch, tez, apache-nifi, apache-pulsar, kayenta-fips, sonarqube, grpc-java-fips, kserve-modelmesh, druid, wavefront-proxy, spark-fips, keycloak-operator-fips, management-api-for-apache-cassandra-4.1, thingsboard, strimzi-kafka-operator, apache-activemq-artemis,...

GHSA-FGHV-69VJ-QJ49 vulnerabilities

Vulnerabilities for packages: opensearch, tez, apache-nifi, apache-pulsar, kayenta-fips, sonarqube, grpc-java-fips, kserve-modelmesh, druid, wavefront-proxy, spark-fips, keycloak-operator-fips, management-api-for-apache-cassandra-4.1, thingsboard, strimzi-kafka-operator, apache-activemq-artemis,...

CVE-2025-55163 vulnerabilities

Vulnerabilities for packages: opensearch, tez, apache-nifi, apache-pulsar, sonarqube, grpc-java-fips, kserve-modelmesh, druid, spark-fips, management-api-for-apache-cassandra-4.1, thingsboard, strimzi-kafka-operator, keycloak, keycloak-operator, localstack, wildfly, debezium-connector-vitess,...

GHSA-PRJ3-CCX8-P6X4 vulnerabilities

Vulnerabilities for packages: opensearch, tez, apache-nifi, apache-pulsar, sonarqube, grpc-java-fips, kserve-modelmesh, druid, spark-fips, management-api-for-apache-cassandra-4.1, thingsboard, strimzi-kafka-operator, keycloak, keycloak-operator, localstack, wildfly, debezium-connector-vitess,...

CVE-2025-48924 vulnerabilities

Vulnerabilities for packages: opensearch, cassandra-reaper, apache-nifi, commercial-elasticsearch, sonarqube, hadoop-client-modules, cassandra-fips, keycloak-config-cli, kserve-modelmesh, airflow, druid, nextflow, maven-stage0, spark-fips, management-api-for-apache-cassandra-4.1, confluent-kafka,...

GHSA-J288-Q9X7-2F5V vulnerabilities

Vulnerabilities for packages: opensearch, cassandra-reaper, apache-nifi, commercial-elasticsearch, sonarqube, hadoop-client-modules, cassandra-fips, keycloak-config-cli, kserve-modelmesh, airflow, druid, nextflow, maven-stage0, spark-fips, management-api-for-apache-cassandra-4.1, confluent-kafka,...

CVE-2025-48734 vulnerabilities

Vulnerabilities for packages: opensearch, tez, cassandra-reaper, apache-nifi, sonarqube, hadoop-client-modules, confluent-common-docker, druid, kafka, confluent-kafka-jre-bcfips, strimzi-kafka-operator, apache-activemq-artemis, wildfly, ghidra, celeborn, camunda-zeebe, spdx-tools-java, akhq,...

CVE-2023-23926

APOC Awesome Procedures on Cypher is an add-on library for Neo4j. An XML External Entity XXE vulnerability found in the apoc.import.graphml procedure of APOC core plugin prior to version 5.5.0 and 4.4.0.14 4.4 branch in Neo4j graph database. XML External Entity XXE injection occurs when the XML...

CVE-2021-42767

A directory traversal vulnerability in the apoc plugins in Neo4J Graph database before 4.4.0.1 allows attackers to read local files, and sometimes create local files. This is fixed in 3.5.17, 4.2.10, 4.3.0.4, and 4.4.0.1...

CVE-2021-34802

A failure in resetting the security context in some transaction actions in Neo4j Graph Database 4.2 and 4.3 could allow authenticated users to execute commands with elevated privileges...

CVE-2021-34371

Neo4j through 3.4.18 with the shell server enabled exposes an RMI service that arbitrarily deserializes Java objects, e.g., through setSessionVariable. An attacker can abuse this for remote code execution because there are dependencies with exploitable gadget chains...

CVE-2018-18389

Due to incorrect access control in Neo4j Enterprise Database Server 3.4.x before 3.4.9, the setting of LDAP for authentication with STARTTLS, and System Account for authorization, allows an attacker to log into the server by sending any valid username with an arbitrary password...