PatchTheCVEsilverpeas vulnerabilities and fixes
Recent CVEs affecting silverpeas, with upgrade or downgrade steps. 6 tracked.
silverpeas has 6 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2025-06-09. Highest priority: CVE-2024-42850 (score 63/100).
- CVE-2024-42850 CRITICAL 9.8 UPGRADE An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password c
- CVE-2024-42849 MEDIUM 6.5 UPGRADE An issue in Silverpeas v.6.4.2 and lower allows a remote attacker to cause a denial of service via the passwor
- CVE-2025-45055 MEDIUM 5.4 DOWNGRADE Silverpeas 6.4.2 contains a stored cross-site scripting (XSS) vulnerability in the event management module
- CVE-2024-56923 MEDIUM 5.4 UPGRADE Stored Cross-Site Scripting (XSS) Vulnerability in the Categorization Option of My Subscriptions Functionality
- CVE-2024-48814 HIGH 7.5 DOWNGRADE SQL Injection vulnerability in Silverpeas 6.4.1 allows a remote attacker to obtain sensitive information via t
- CVE-2024-39031 MEDIUM 5.4 UPGRADE In Silverpeas Core <= 6.3.5, in Mes Agendas, a user can create new events and add them to their calendar
FAQ
How do I fix silverpeas vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is silverpeas being exploited right now?
None of the tracked silverpeas CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which silverpeas CVE should I patch first?
CVE-2024-42850 currently ranks highest (63/100): An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password c.