GCVE - cpe:2.3:a:typo3:typo3:4.0.12:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:typo3:typo3:4.0.12:*:*:*:*:*:*:*

part: a version: 4.0.12 update: *

Vendor	Typo3 (`bebcd01c-0947-5641-89ed-9b814cca944e`)
Product	Typo3 (`e0e75c36-ce92-5448-bdce-8b59acd8c849`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/typo3/typo3`	purl2cpe	2026-06-01 10:16:08.642915
`pkg:typo3/typo3.cms.git`	purl2cpe	2026-06-01 10:16:08.642916

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-3945`	vulnerable	2026-06-08 05:05:43.497791	Details available The Authentication component in TYPO3 before 6.2, when salting for password hashing is disabled, does not require knowledge of the cleartext password if the password hash is known, which allows remote attackers to bypass authentication and gain access to the backend by leveraging knowledge of a password hash. Published: 2014-06-03T14:00:00.000Z Updated: 2024-08-06T10:57:17.942Z Open on db.gcve.eu Reference links http://www.debian.org/security/2014/dsa-2942 http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2014-001/ http://www.openwall.com/lists/oss-security/2014/06/03/2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3632`	vulnerable	2026-06-08 04:51:43.352359	Details available SQL injection vulnerability in the traditional frontend editing feature in the Frontend Editing subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to execute arbitrary SQL commands via unspecified parameters. Published: 2009-11-02T15:00:00.000Z Updated: 2024-08-07T06:38:29.503Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/53924 http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/ http://secunia.com/advisories/37122 http://marc.info/?l=oss-security&m=125632856206736&w=2 http://www.vupen.com/english/advisories/2009/3009	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3629`	vulnerable	2026-06-08 04:51:43.341991	Details available Multiple cross-site scripting (XSS) vulnerabilities in the Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Published: 2009-11-02T15:00:00.000Z Updated: 2024-08-07T06:38:28.461Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/53918 http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/ http://secunia.com/advisories/37122 http://marc.info/?l=oss-security&m=125633199111438&w=2 http://marc.info/?l=oss-security&m=125632856206736&w=2	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.