Approved changes feed: RSS · Atom

cpe:2.3:a:neo4j:neo4j:*:*:*:*:*:community:*:*

part: a version: * update: *

VendorNeo4J (087e8666-bd16-531b-a554-5f5140392be5)
ProductNeo4J (fa9ade5f-ebad-5027-84ac-22a59d7aaadf)
Edition*
Language*
Software edition*
Target softwarecommunity
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/neo4j/neo4j purl2cpe 2026-06-01 10:12:08.111936
pkg:maven/org.neo4j/neo4j purl2cpe 2026-06-01 10:12:08.111938

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-34517 vulnerable 2026-06-08 06:37:33.417760 Details available
MEDIUM (6.5)
The Cypher component in Neo4j 5.0.0 through 5.18 mishandles IMMUTABLE privileges in some situations where an attacker already has admin access.
Published: 2024-05-07T00:00:00.000Z
Updated: 2025-07-23T03:55:32.171Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.