Log in Start free

Palantir

Products

ProductCVEsExploitedLatest
com.palantir.foundry:foundry-frontend4–Aug 3, 2023
Gotham3–Feb 16, 2023
com.palantir.acme.gaia:gaia2–Dec 19, 2025
com.palantir.issues:issues2–Jul 10, 2023
com.palantir.comments:comments2–Jul 10, 2023
com.palantir.acme:stencil-app-bundle1–Jan 9, 2026
com.palantir.acme:titanium-browser-app-bundle1–Sep 26, 2023
com.palantir.apollo:autopilot1–Sep 26, 2023
com.palantir.aries:aries1–Jan 22, 2026
com.palantir.artifacts:artifacts1–Feb 18, 2025
com.palantir.campaigns:campaigns1–Aug 3, 2023
com.palantir.codeassist2:code-assist-proxy1–Dec 18, 2025
com.palantir.compute:compute-service1–Dec 18, 2025
com.palantir.contour:contour-dispatch1–Jun 26, 2023
com.palantir.controlpanel:control-panel1–Dec 18, 2025
com.palantir.foundry.jobtracker:job-tracker1–Jul 10, 2023
com.palantir.gotham:blackbird-witchcraft1–Jan 29, 2024
com.palantir.gotham:clips21–Jun 26, 2023
com.palantir.gotham:external-artifacts1–Dec 2, 2024
com.palantir.gotham:glutton1–Dec 19, 2025
com.palantir.lime:lime21–Jun 6, 2023
com.palantir.magritte:magritte-rest-source-bundle1–Aug 3, 2023
com.palantir.meta:orbital-simulator1–Oct 25, 2023
com.palantir.secupload:secure-upload1–Jul 10, 2025
com.palantir.skywise:guardian1–Jan 29, 2024
com.palantir.slate:slate1–Jul 26, 2023
com.palantir.srx.prometheus.sls-oracle-sidecar:sls-oracle-sidecar1–Nov 21, 2024
com.palantir.tiles:tiles1–Oct 25, 2023
com.palantir.video:video-application-server1–Nov 15, 2023
com.palantir.video:video-clip-distributor1–Jun 26, 2023
com.palantir.video:video-history-server1–Jun 26, 2023
com.palantir.workspace:workspace1–Jun 29, 2023
Foundry Blobster Service1–Nov 4, 2022
Foundry Build21–Nov 15, 2022
Foundry Code-Workbooks1–Nov 14, 2022
Foundry Issues1–Apr 26, 2022
Foundry Magritte1–Feb 16, 2023
Foundry Magritte plugin osisoft-pi-web-connector1–Nov 4, 2022
Foundry Multipass1–Jun 14, 2022
Palantir Gotham Chat IRC helper1–Feb 16, 2023
AtlasDB1–Feb 16, 2023
sls-logging1–Feb 16, 2023
com.palantir.acme.cerberus:cerberus1–Sep 12, 2023
com.palantir.acme:dossier-app1–Jan 9, 2026
com.palantir.acme:gotham-default-apps-bundle1–Jan 9, 2026
com.palantir.acme:gotham-fe-bundle1–Sep 26, 2023

Exploited and recent CVEs

  • CVE-2025-68609 Medium 6.6 Authentication bypass in Aries due to misconfiguration 0.4%
  • CVE-2025-62487 Low 3.5 Under certain configurations, file artifacts uploaded to the Dossier and Slides apps did not inherit security markings of their parent artifact. This lack of security markings could lead to unintended access to the uploaded files. 0.2%
  • CVE-2025-62487 Low 3.5 Under certain configurations, file artifacts uploaded to the Dossier and Slides apps did not inherit security markings of their parent artifact. This lack of security markings could lead to unintended access to the uploaded files. 0.2%
  • CVE-2025-62487 Low 3.5 Under certain configurations, file artifacts uploaded to the Dossier and Slides apps did not inherit security markings of their parent artifact. This lack of security markings could lead to unintended access to the uploaded files. 0.2%
  • CVE-2023-30971 Medium 6.8 Gaia unauthenticated endpoints 0.2%
  • CVE-2024-49587 Critical 9.1 Glutton V1 endpoints missing authentication 0.3%
  • CVE-2025-53710 High 7.5 Network boundaries not respected in certain Foundry namespaces. 0.3%
  • CVE-2025-53710 High 7.5 Network boundaries not respected in certain Foundry namespaces. 0.3%
  • CVE-2025-64400 Medium 4.1 Insufficient permission checks when pre-enrolling users Summary 0.2%
  • CVE-2025-53709 Medium 5.4 Access control issues impacting secure-upload service 0.2%
  • CVE-2024-49589 Medium 6.5 Foundry artifacts denial of service 0.5%
  • CVE-2024-49581 Medium 6.5 Access control issue impacting RV backed objects 0.4%
  • CVE-2024-49588 Medium 6.8 Multiple authenticated SQL injections in oracle-sidecar 0.3%
  • CVE-2023-30968 Medium 6.8 Stored XSS in gaia 0.5%
  • CVE-2023-22836 Low 3.5 In cases where a multi-tenant stack user is operating Foundry’s Linter service, and the user changes the linter name from the default value, the renamed value may be visible to the rest of the stack’s tenants. 0.3%
  • CVE-2023-30970 Medium 6.5 Gotham table and Forward App Path traversal 0.5%
  • CVE-2023-30954 Low 2.7 Gotham Video Broken Authentication 0.3%
  • CVE-2023-30967 Critical 9.8 Gotham Orbital Simulator path traversal 0.7%
  • CVE-2023-30969 High 8.2 Palantir Tiles missing authentication on API endpoints 0.4%
  • CVE-2023-30961 Medium 6.5 Palantir Gotham UI bug that could lead to incorrect data classification 0.4%
  • CVE-2023-30961 Medium 6.5 Palantir Gotham UI bug that could lead to incorrect data classification 0.4%
  • CVE-2023-30959 Medium 4.1 Stored XSS via javascript URI in Apollo Change Requests comment 0.4%
  • CVE-2023-30962 Medium 6.8 Stored XSS in cerberus attachments 0.4%
  • CVE-2023-30952 Medium 5.0 Foundry Issues reporterPath phishing by parameter injection 0.4%
  • CVE-2023-30950 Medium 6.5 CVE-2023-30950 0.4%
  • CVE-2023-30958 Medium 4.7 DOM XSS in Developer mode dashboard via redirect GET parameter 0.4%
  • CVE-2023-30951 Medium 6.3 CVE-2023-30951 0.5%
  • CVE-2023-30949 Medium 4.3 CVE-2023-30949 0.2%
  • CVE-2023-30956 Medium 5.3 IDOR in Foundry Comments allows retrieval of attachments 0.5%
  • CVE-2023-30960 Medium 4.3 Insecure Direct Object Reference (IDOR) in Foundry job-tracker 0.4%