org.silverpeas.core:silverpeas-core-war

4 results · Feed

• Medium 6.5
  CVE-2026-53698

  Silverpeas mishandles the "Personal space" feature that is selected when no componentId is set

  Silverpeas through 6.4.6 mishandles the "Personal space" feature that is selected when no componentId is set.

  Silverpeas Silverpeas org.silverpeas.core:silverpeas-core org.silverpeas.core:silverpeas-core-war Maven
  Jun 10, 2026
• Medium 6.1
  CVE-2026-30139

  Silverpeas Core has a reflected cross-site scripting vulnerability

  A reflected cross-site scripting (XSS) vulnerability in the AdvancedSearch functionality of Silverpeas Core before version 6.4.6 allows attackers to execute arbitrary JavaScript in the context of a user's browser via crafted input.

  org.silverpeas.core:silverpeas-core-web org.silverpeas.core:silverpeas-core-war Maven
  Apr 22, 2026
• Medium 5.4
  CVE-2023-47324

  Cross-site Scripting in silverpeas

  Silverpeas Core 6.3.1 is vulnerable to Cross Site Scripting (XSS) via the message/notification feature.

  org.silverpeas.core:silverpeas-core-web org.silverpeas.core:silverpeas-core-war org.silverpeas.core:silverpeas-core-api org.silverpeas.core:silverpeas-core-configuration Maven
  Dec 13, 2023
• High 8.1
  CVE-2023-47320

  Broken access control in Silverpeas

  Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Control. An attacker with low privileges is able to execute the administrator-only function of putting the application in "Maintenance Mode" due to broken access control. This makes the application unava…

  org.silverpeas.core:silverpeas-core-web org.silverpeas.core:silverpeas-core-war Maven
  Dec 13, 2023