Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Palantir — Vulnerabilities & Security Advisories 47

Browse all 47 CVE security advisories affecting Palantir. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Palantir Technologies primarily develops software platforms for data integration, analysis, and decision-making, serving government agencies and large enterprises. With forty-seven recorded Common Vulnerabilities and Exposures (CVEs), the company’s historical attack surface has frequently involved remote code execution, cross-site scripting, and privilege escalation flaws. These vulnerabilities often stem from complex web interfaces and backend data processing components, allowing attackers to potentially bypass authentication or execute arbitrary commands. Notable security characteristics include the inherent risks associated with handling sensitive, classified, or proprietary data, which makes successful exploitation particularly damaging. While specific major public breaches are less documented compared to consumer tech firms, the high-value nature of its client base necessitates rigorous security postures. The recurring nature of these CVEs highlights the challenges of securing large-scale, integrated data ecosystems against sophisticated threat actors seeking access to critical information infrastructure.

CVE ID Title CVSS Severity Published
CVE-2023-22834 The contour service was not checking that users had permission to create an analysis for a given dataset — com.palantir.contour:contour-dispatch CWE-425 2.7 Low 2023-06-26
CVE-2023-30945 CVE-2023-30945 — com.palantir.gotham:clips2 CWE-287 9.8 Critical 2023-06-26
CVE-2023-22833 Mandatory control bypass in Lime2 — com.palantir.lime:lime2 CWE-304 7.6 High 2023-06-06
CVE-2023-30948 Retrieval of Attachments to Comments lacks Authorization — com.palantir.comments:comments CWE-285 6.5 Medium 2023-06-06
CVE-2022-48308 Palantir 信任管理问题漏洞 — sls-logging CWE-297 6.3 Medium 2023-02-16
CVE-2022-27890 Palantir 信任管理问题漏洞 — AtlasDB CWE-297 6.3 Medium 2023-02-16
CVE-2022-27891 Palantir Gotham included an unauthenticated endpoint that listed all active usernames in the platform with an active session. — Gotham CWE-200 5.3 Medium 2023-02-16
CVE-2022-27892 Palantir Gotham included an endpoint that would log arbitrary sized payloads. — Gotham CWE-20 5.3 Medium 2023-02-16
CVE-2022-27897 Palantir Gotham included an endpoint that would log arbitrary sized zip files. — Gotham CWE-20 5.3 Medium 2023-02-16
CVE-2022-48306 Gotham Chat IRC help does not validate hostnames in TLS certificates — Palantir Gotham Chat IRC helper CWE-297 5.7 Medium 2023-02-16
CVE-2022-48307 Palantir 信任管理问题漏洞 — Foundry Magritte CWE-297 6.3 Medium 2023-02-16
CVE-2022-27895 A component in Foundry logging was found to be capturing sensitive information in logs. — Foundry Build2 CWE-532 4.2 Medium 2022-11-15
CVE-2022-27896 The Foundry Code-Workbooks service was found to contain an issue leading to information disclosure. — Foundry Code-Workbooks CWE-532 4.2 Medium 2022-11-14
CVE-2022-27894 The Foundry Blobster service was found to have a cross-site scripting (XSS) vulnerability. — Foundry Blobster Service CWE-79 4.8 Medium 2022-11-04
CVE-2022-27893 The Foundry Magritte plugin osisoft-pi-web-connector was found to be logging in a manner that captured authentication requests. — Foundry Magritte plugin osisoft-pi-web-connector CWE-532 4.2 Medium 2022-11-04
CVE-2022-27889 The Foundry Multipass service contains code paths that could be abused to cause a denial of service for authentication and authorization operations. — Foundry Multipass CWE-400 5.3 Medium 2022-06-14
CVE-2022-27888 The Foundry Issues service was found to be logging in a manner that captured session tokens. — Foundry Issues CWE-532 5.5 Medium 2022-04-26

This page lists every published CVE security advisory associated with Palantir. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.