org.silverpeas.core:silverpeas-core

4 results · Clear filters · Feed

• Medium 6.5
  CVE-2026-53698

  Silverpeas mishandles the "Personal space" feature that is selected when no componentId is set

  Silverpeas through 6.4.6 mishandles the "Personal space" feature that is selected when no componentId is set.

  Silverpeas Silverpeas org.silverpeas.core:silverpeas-core org.silverpeas.core:silverpeas-core-war Maven
  Jun 10, 2026
• Medium 6.5
  CVE-2025-46047 Public exploit

  Silverpeas Core Username Enumeration Vulnerability

  A User enumeration vulnerability in the /CredentialsServlet/ForgotPassword endpoint in Silverpeas 6.4.1 and 6.4.2 allows remote attackers to determine valid usernames via the Login parameter.

  org.silverpeas.core:silverpeas-core Maven
  Sep 2, 2025
• Medium 5.4
  CVE-2024-56923

  Cross site scripting in Silverpeas Core

  Stored Cross-Site Scripting (XSS) Vulnerability in the Categorization Option of My Subscriptions Functionality in Silverpeas Core 6.3.1 <= 6.4.1 allows a remote attacker to execute arbitrary JavaScript code. This is achieved by injecting a malicious payload i…

  org.silverpeas.core:silverpeas-core Maven
  Jan 22, 2025
• Medium 5.4
  CVE-2024-29392

  Silverpeas Core vulnerable to Cross Site Scripting

  Silverpeas Core 6.3 is vulnerable to Cross Site Scripting (XSS) via ClipboardSessionController.

  org.silverpeas.core:silverpeas-core Maven
  May 22, 2024