org.silverpeas.core:silverpeas-core (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package org.silverpeas.core:silverpeas-core, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (6)

• CVE-2024-36042 — CVSS 9.8 (critical): Silverpeas before 6.3.5 allows authentication bypass by omitting the Password field to AuthenticationServlet, often providing an…
• CVE-2024-42850 — CVSS 9.8 (critical): An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements.
• CVE-2023-47326 — CVSS 8.8 (high): Silverpeas Core 6.3.1 is vulnerable to Cross Site Request Forgery (CSRF) via the Domain SQL Create function.
• CVE-2025-46047 — CVSS 6.5 (medium): A User enumeration vulnerability in the /CredentialsServlet/ForgotPassword endpoint in Silverpeas 6.4.1 and 6.4.2 allows remote attackers…
• CVE-2024-29392 — CVSS 5.4 (medium): Silverpeas Core 6.3 is vulnerable to Cross Site Scripting (XSS) via ClipboardSessionController.
• CVE-2024-56923 — CVSS 5.4 (medium): Stored Cross-Site Scripting (XSS) Vulnerability in the Categorization Option of My Subscriptions Functionality in Silverpeas Core 6.3.1 <=…