Skip to content
OpenAdvisories

Package · Maven

org.silverpeas.core:silverpeas-core

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-46047 Public exploit

    Silverpeas Core Username Enumeration Vulnerability

    A User enumeration vulnerability in the /CredentialsServlet/ForgotPassword endpoint in Silverpeas 6.4.1 and 6.4.2 allows remote attackers to determine valid usernames via the Login parameter.

    org.silverpeas.core:silverpeas-core Maven
  • Critical 9.8
    CVE-2024-42850 Public exploit

    Silverpeas vulnerable to password complexity rule bypass

    An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements.

    org.silverpeas.core:silverpeas-core Maven
  • Critical 9.8
    CVE-2024-36042 Public exploit

    Silverpeas authentication bypass

    Silverpeas before 6.3.5 allows authentication bypass by omitting the Password field to AuthenticationServlet, often providing an unauthenticated user with superadmin access.

    org.silverpeas.core:silverpeas-core Maven