GCVE - cpe:2.3:a:typo3:typo3:4.4.6:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:typo3:typo3:4.4.6:*:*:*:*:*:*:*

part: a version: 4.4.6 update: *

Vendor	Typo3 (`bebcd01c-0947-5641-89ed-9b814cca944e`)
Product	Typo3 (`e0e75c36-ce92-5448-bdce-8b59acd8c849`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/typo3/typo3`	purl2cpe	2026-06-01 10:16:08.686440
`pkg:typo3/typo3.cms.git`	purl2cpe	2026-06-01 10:16:08.686441

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-2047`	vulnerable	2026-06-08 05:06:27.322187	Details available The rsaauth extension in TYPO3 4.3.0 through 4.3.14, 4.4.0 through 4.4.15, 4.5.0 through 4.5.39, and 4.6.0 through 4.6.18, when configured for the frontend, allows remote attackers to bypass authentication via a password that is casted to an empty value. Published: 2015-02-23T17:00:00.000Z Updated: 2024-08-06T05:02:42.990Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/72763 https://review.typo3.org/#/c/37013/ http://lists.opensuse.org/opensuse-updates/2016-08/msg00106.html http://www.securitytracker.com/id/1031824 http://www.openwall.com/lists/oss-security/2015/02/22/4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3945`	vulnerable	2026-06-08 05:05:43.532335	Details available The Authentication component in TYPO3 before 6.2, when salting for password hashing is disabled, does not require knowledge of the cleartext password if the password hash is known, which allows remote attackers to bypass authentication and gain access to the backend by leveraging knowledge of a password hash. Published: 2014-06-03T14:00:00.000Z Updated: 2024-08-06T10:57:17.942Z Open on db.gcve.eu Reference links http://www.debian.org/security/2014/dsa-2942 http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2014-001/ http://www.openwall.com/lists/oss-security/2014/06/03/2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2112`	vulnerable	2026-06-08 05:00:52.875286	Details available Cross-site scripting (XSS) vulnerability in the Exception Handler in TYPO3 4.4.x before 4.4.15, 4.5.x before 4.5.15, 4.6.x before 4.6.8, and 4.7 allows remote attackers to inject arbitrary web script or HTML via exception messages. Published: 2012-08-27T21:00:00.000Z Updated: 2024-08-06T19:26:07.612Z Open on db.gcve.eu Reference links http://lists.typo3.org/pipermail/typo3-announce/2012/000241.html https://exchange.xforce.ibmcloud.com/vulnerabilities/74920 http://www.securityfocus.com/bid/53047 http://lists.typo3.org/pipermail/typo3-announce/2012/000242.html http://www.openwall.com/lists/oss-security/2012/04/17/5	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1608`	vulnerable	2026-06-08 05:00:49.844729	Details available The t3lib_div::RemoveXSS API method in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to bypass the cross-site scripting (XSS) protection mechanism and inject arbitrary web script or HTML via non printable characters. Published: 2012-09-04T20:00:00.000Z Updated: 2024-09-17T00:15:45.093Z Open on db.gcve.eu Reference links http://secunia.com/advisories/48647 http://www.openwall.com/lists/oss-security/2012/03/30/4 http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-001/ http://www.debian.org/security/2012/dsa-2445 http://www.osvdb.org/80762	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1607`	vulnerable	2026-06-08 05:00:49.841558	Details available The Command Line Interface (CLI) script in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to obtain the database name via a direct request. Published: 2012-09-04T20:00:00.000Z Updated: 2024-09-16T19:35:52.631Z Open on db.gcve.eu Reference links http://secunia.com/advisories/48647 http://secunia.com/advisories/48622 http://www.openwall.com/lists/oss-security/2012/03/30/4 http://osvdb.org/80761 http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-001/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1606`	vulnerable	2026-06-08 05:00:49.828497	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.