Skip to content
Noroxi

Silverpeas records

18 published records for vendor silverpeas.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
61.1%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 23
  3. 24
  4. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

18 records
  • CVE-2018-19586
    41Plan

    Silverpeas 5.15 through 6.0.2 is affected by an authenticated Directory Traversal vulnerability that can be triggered during file uploads be

    CriticalCVSS 9.9No exploitEPSS 5%

    silverpeas · silverpeasApr 9, 2019

  • CVE-2024-42850
    39Monitor

    An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements.

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    silverpeas · silverpeasAug 16, 2024

  • CVE-2024-36042
    39Monitor

    Silverpeas before 6.3.5 allows authentication bypass by omitting the Password field to AuthenticationServlet, often providing an unauthentic

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    silverpeas · silverpeasJun 3, 2024

  • CVE-2023-47322
    35Monitor

    The "userModify" feature of Silverpeas Core 6.3.1 is vulnerable to Cross Site Request Forgery (CSRF) leading to privilege escalation.

    HighCVSS 8.8No exploitEPSS 0%

    silverpeas · silverpeasDec 13, 2023

  • CVE-2023-47326
    35Monitor

    Silverpeas Core 6.3.1 is vulnerable to Cross Site Request Forgery (CSRF) via the Domain SQL Create function.

    HighCVSS 8.8No exploitEPSS 0%

    silverpeas · silverpeasDec 13, 2023

  • CVE-2023-47320
    32Monitor

    Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Control.

    HighCVSS 8.1No exploitEPSS 0%

    silverpeas · silverpeasDec 13, 2023

  • CVE-2023-47323
    30Monitor

    The notification/messaging feature of Silverpeas Core 6.3.1 does not enforce access control on the ID parameter.

    HighCVSS 7.5No exploitEPSS 0%

    silverpeas · silverpeasDec 13, 2023

  • CVE-2024-48814
    30Monitor

    SQL Injection vulnerability in Silverpeas 6.4.1 allows a remote attacker to obtain sensitive information via the ViewType parameter of the f

    HighCVSS 7.5No exploitEPSS 0%

    silverpeas · silverpeasJan 3, 2025

  • CVE-2024-42849
    26Monitor

    An issue in Silverpeas v.6.4.2 and lower allows a remote attacker to cause a denial of service via the password change function.

    MediumCVSS 6.5Proof of conceptEPSS 1%

    silverpeas · silverpeasAug 16, 2024

  • CVE-2025-46047
    26Monitor

    A User enumeration vulnerability in the /CredentialsServlet/ForgotPassword endpoint in Silverpeas 6.4.1 and 6.4.2 allows remote attackers to

    MediumCVSS 6.5Proof of conceptEPSS 0%

    silverpeas · silverpeasSep 2, 2025

  • CVE-2024-39031
    21Monitor

    In Silverpeas Core <= 6.3.5, in Mes Agendas, a user can create new events and add them to their calendar.

    MediumCVSS 5.4Proof of conceptEPSS 0%

    silverpeas · silverpeasJul 9, 2024

  • CVE-2023-47324
    21Monitor

    Silverpeas Core 6.3.1 is vulnerable to Cross Site Scripting (XSS) via the message/notification feature.

    MediumCVSS 5.4No exploitEPSS 0%

    silverpeas · silverpeasDec 13, 2023

  • CVE-2023-47325
    21Monitor

    Silverpeas Core 6.3.1 administrative "Bin" feature is affected by broken access control.

    MediumCVSS 5.4No exploitEPSS 0%

    silverpeas · silverpeasDec 13, 2023

  • CVE-2024-29392
    21Monitor

    Silverpeas Core 6.3 is vulnerable to Cross Site Scripting (XSS) via ClipboardSessionController.

    MediumCVSS 5.4No exploitEPSS 0%

    silverpeas · silverpeasMay 22, 2024

  • CVE-2025-45055
    21Monitor

    Silverpeas 6.4.2 contains a stored cross-site scripting (XSS) vulnerability in the event management module.

    MediumCVSS 5.4No exploitEPSS 0%

    silverpeas · silverpeasJun 9, 2025

  • CVE-2024-56923
    21Monitor

    Stored Cross-Site Scripting (XSS) Vulnerability in the Categorization Option of My Subscriptions Functionality in Silverpeas Core 6.3.1 <= 6

    MediumCVSS 5.4No exploitEPSS 0%

    silverpeas · silverpeasJan 22, 2025

  • CVE-2023-47321
    19Monitor

    Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Control via the "Porlet Deployer" which allows administrators to deploy .WAR portlet

    MediumCVSS 4.9No exploitEPSS 0%

    silverpeas · silverpeasDec 13, 2023

  • CVE-2023-47327
    17Monitor

    The "Create a Space" feature in Silverpeas Core 6.3.1 is reserved for use by administrators.

    MediumCVSS 4.3No exploitEPSS 0%

    silverpeas · silverpeasDec 13, 2023