CVE-2025-11602CWE-226

CVE-2025-11602

published October 31, 2025

CVSS
6.3
EPSS
0%
Percentile
24.0
In the wild
Unconfirmed
What it is

Potential information leak in bolt protocol handshake in Neo4j Enterprise and Community editions allows attacker to obtain one byte of information from previous connections. The attacker has no control over the information leaked in server responses.

The record
Technical detail
CVSS
6.3 · NONE
CVSS v4.0
Not supplied
EPSS
0.00322 · 24.0th percentile
Weakness
CWE-226 · Sensitive Information in Resource Not Removed Before Reuse
Published
2025-10-31T15:15Z
References (1)
EPSS history
Timeline
  • 31 OCT 10:20Z
    Untargeted information leak in Bolt protocol handshake
    cvelistv5