Silverpeas vulnerabilities
We track 4 vulnerabilities in Silverpeas products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on January 3, 2025.
Latest Silverpeas vulnerabilities
- 7.5 High severity
Silverpeas: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in Silverpeas 6.4.1 allows a remote attacker to obtain sensitive information via the ViewType parameter of the findbywhereclause function
- 9.8 Critical severity
silverpeas: Authentication Bypass Using an Alternate Path or Channel
Silverpeas before 6.3.5 allows authentication bypass by omitting the Password field to AuthenticationServlet, often providing an unauthenticated user with superadmin access.
- 8.8 High severity
Silverpeas: Cross-Site Request Forgery
The "userModify" feature of Silverpeas Core 6.3.1 is vulnerable to Cross Site Request Forgery (CSRF) leading to privilege escalation. If an administrator goes to a malicious URL while being authenticated to the Silverpeas application, the CSRF with execute mak
- 8.1 High severity
Silverpeas: Incorrect Authorization
Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Control. An attacker with low privileges is able to execute the administrator-only function of putting the application in "Maintenance Mode" due to broken access control. This makes the application unavai