Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.silverpeas.core:silverpeas-core

7 known vulnerabilities (2 critical, 4 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
7 · 2 critical, 4 medium
Registry
Maven Central

Advisories 7

  • CVE-2026-53698Medium 6.5

    Silverpeas through 6.4.6 mishandles the "Personal space" feature that is selected when no componentId is set.

    Affected: through 6.4-feature13197.

  • CVE-2025-46047Medium 6.5

    A User enumeration vulnerability in the /CredentialsServlet/ForgotPassword endpoint in Silverpeas 6.4.1 and 6.4.2 allows remote attackers…

    Affected: from 6.4.1, fixed in 6.4.3.

  • CVE-2024-56923Medium 5.4

    Stored Cross-Site Scripting (XSS) Vulnerability in the Categorization Option of My Subscriptions Functionality in Silverpeas Core 6.3.1 <=…

    Affected: from 6.3.1, fixed in 6.4.2.

  • CVE-2024-42850Critical 9.8

    An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements.

    Affected: through 6.4.2.

  • CVE-2024-36042Critical 9.8

    Silverpeas before 6.3.5 allows authentication bypass by omitting the Password field to AuthenticationServlet, often providing an…

    Affected: fixed in 6.3.5.

  • CVE-2024-29392Medium 5.4

    Silverpeas Core 6.3 is vulnerable to Cross Site Scripting (XSS) via ClipboardSessionController.

    Affected: through 6.3.

  • Silverpeas Core 6.3.1 is vulnerable to Cross Site Request Forgery (CSRF) via the Domain SQL Create function.

    Affected: fixed in 6.3.2.