İçeriğe atla
Noroxi

Silverpeas kayıtları

silverpeas üreticisine ait 18 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%61,1
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 23
  3. 24
  4. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

18 kayıt
  • CVE-2018-19586
    41Planlayın

    Silverpeas 5.15 through 6.0.2 is affected by an authenticated Directory Traversal vulnerability that can be triggered during file uploads be

    KritikCVSS 9,9İstismar yokEPSS %5

    silverpeas · silverpeas9 Nis 2019

  • CVE-2024-42850
    39İzleyin

    An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements.

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    silverpeas · silverpeas16 Ağu 2024

  • CVE-2024-36042
    39İzleyin

    Silverpeas before 6.3.5 allows authentication bypass by omitting the Password field to AuthenticationServlet, often providing an unauthentic

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    silverpeas · silverpeas3 Haz 2024

  • CVE-2023-47322
    35İzleyin

    The "userModify" feature of Silverpeas Core 6.3.1 is vulnerable to Cross Site Request Forgery (CSRF) leading to privilege escalation.

    YüksekCVSS 8,8İstismar yokEPSS %0

    silverpeas · silverpeas13 Ara 2023

  • CVE-2023-47326
    35İzleyin

    Silverpeas Core 6.3.1 is vulnerable to Cross Site Request Forgery (CSRF) via the Domain SQL Create function.

    YüksekCVSS 8,8İstismar yokEPSS %0

    silverpeas · silverpeas13 Ara 2023

  • CVE-2023-47320
    32İzleyin

    Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Control.

    YüksekCVSS 8,1İstismar yokEPSS %1

    silverpeas · silverpeas13 Ara 2023

  • CVE-2023-47323
    30İzleyin

    The notification/messaging feature of Silverpeas Core 6.3.1 does not enforce access control on the ID parameter.

    YüksekCVSS 7,5İstismar yokEPSS %1

    silverpeas · silverpeas13 Ara 2023

  • CVE-2024-48814
    30İzleyin

    SQL Injection vulnerability in Silverpeas 6.4.1 allows a remote attacker to obtain sensitive information via the ViewType parameter of the f

    YüksekCVSS 7,5İstismar yokEPSS %1

    silverpeas · silverpeas3 Oca 2025

  • CVE-2024-42849
    26İzleyin

    An issue in Silverpeas v.6.4.2 and lower allows a remote attacker to cause a denial of service via the password change function.

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    silverpeas · silverpeas16 Ağu 2024

  • CVE-2025-46047
    26İzleyin

    A User enumeration vulnerability in the /CredentialsServlet/ForgotPassword endpoint in Silverpeas 6.4.1 and 6.4.2 allows remote attackers to

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    silverpeas · silverpeas2 Eyl 2025

  • CVE-2024-39031
    21İzleyin

    In Silverpeas Core <= 6.3.5, in Mes Agendas, a user can create new events and add them to their calendar.

    OrtaCVSS 5,4Kavram kanıtıEPSS %1

    silverpeas · silverpeas9 Tem 2024

  • CVE-2023-47324
    21İzleyin

    Silverpeas Core 6.3.1 is vulnerable to Cross Site Scripting (XSS) via the message/notification feature.

    OrtaCVSS 5,4İstismar yokEPSS %0

    silverpeas · silverpeas13 Ara 2023

  • CVE-2023-47325
    21İzleyin

    Silverpeas Core 6.3.1 administrative "Bin" feature is affected by broken access control.

    OrtaCVSS 5,4İstismar yokEPSS %0

    silverpeas · silverpeas13 Ara 2023

  • CVE-2024-29392
    21İzleyin

    Silverpeas Core 6.3 is vulnerable to Cross Site Scripting (XSS) via ClipboardSessionController.

    OrtaCVSS 5,4İstismar yokEPSS %0

    silverpeas · silverpeas22 May 2024

  • CVE-2024-56923
    21İzleyin

    Stored Cross-Site Scripting (XSS) Vulnerability in the Categorization Option of My Subscriptions Functionality in Silverpeas Core 6.3.1 <= 6

    OrtaCVSS 5,4İstismar yokEPSS %0

    silverpeas · silverpeas22 Oca 2025

  • CVE-2025-45055
    21İzleyin

    Silverpeas 6.4.2 contains a stored cross-site scripting (XSS) vulnerability in the event management module.

    OrtaCVSS 5,4İstismar yokEPSS %0

    silverpeas · silverpeas9 Haz 2025

  • CVE-2023-47321
    19İzleyin

    Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Control via the "Porlet Deployer" which allows administrators to deploy .WAR portlet

    OrtaCVSS 4,9İstismar yokEPSS %1

    silverpeas · silverpeas13 Ara 2023

  • CVE-2023-47327
    17İzleyin

    The "Create a Space" feature in Silverpeas Core 6.3.1 is reserved for use by administrators.

    OrtaCVSS 4,3İstismar yokEPSS %1

    silverpeas · silverpeas13 Ara 2023