CVEs published by Palantir Technologies

CVEs published by Palantir Technologies (CVE Numbering Authority). 10 tracked.

CVE-2025-68609 MEDIUM 6.6 A vulnerability in Palantir's Aries service allowed unauthenticated access to log viewing and management funct
CVE-2025-64400 MEDIUM 4.1 Control Panel provides an API for pre-registering into an enrollment and organization prior to a user's first
CVE-2025-62487 LOW 3.5 On October 1, 2025, Palantir discovered that images uploaded through the Dossier front-end app were not being
CVE-2025-53710 HIGH 7.5 Due to a product misconfiguration in certain deployment types, it was possible from different pods in the same
CVE-2025-53709 MEDIUM 5.4 Secure-upload is a data submission service that validates single-use tokens when accepting submissions to chan
CVE-2024-49589 MEDIUM 6.5 Foundry Artifacts was found to be vulnerable to a Denial Of Service attack due to disk being potentially fille
CVE-2024-49588 MEDIUM 6.8 Multiple endpoints in `oracle-sidecar` in versions 0.347.0 to 0.543.0 were found to be vulnerable to SQL injec
CVE-2024-49587 CRITICAL 9.1 Glutton V1 service endpoints were exposed without any authentication on Gotham stacks, this could have allowed
CVE-2024-49581 MEDIUM 6.5 Restricted Views backed objects (OSV1) could be bypassed under specific circumstances due to a software bug, t
CVE-2023-30971 MEDIUM 6.8 Gotham Gaia application was found to be exposing multiple unauthenticated endpoints.