GCVE - cpe:2.3:a:typo3:typo3:4.7.15:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:typo3:typo3:4.7.15:*:*:*:*:*:*:*

part: a version: 4.7.15 update: *

Vendor	Typo3 (`bebcd01c-0947-5641-89ed-9b814cca944e`)
Product	Typo3 (`e0e75c36-ce92-5448-bdce-8b59acd8c849`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/typo3/typo3`	purl2cpe	2026-06-01 10:16:08.686651
`pkg:typo3/typo3.cms.git`	purl2cpe	2026-06-01 10:16:08.686653

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-9509`	vulnerable	2026-06-08 05:06:12.072331	Details available The frontend rendering component in TYPO3 4.5.x before 4.5.39, 4.6.x through 6.2.x before 6.2.9, and 7.x before 7.0.2, when config.prefixLocalAnchors is set to all or cached, allows remote attackers to have an unspecified impact (possibly resource consumption) via a "Cache Poisoning" attack using a URL with arbitrary arguments, which triggers a reload of the page. Published: 2015-01-04T21:00:00.000Z Updated: 2024-09-17T03:13:04.483Z Open on db.gcve.eu Reference links http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2014-003/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-9508`	vulnerable	2026-06-08 05:06:12.048176	Details available The frontend rendering component in TYPO3 4.5.x before 4.5.39, 4.6.x through 6.2.x before 6.2.9, and 7.x before 7.0.2, when config.prefixLocalAnchors is set and using a homepage with links that only contain anchors, allows remote attackers to change URLs to arbitrary domains for those links via unknown vectors. Published: 2015-01-04T21:00:00.000Z Updated: 2024-08-06T13:47:41.065Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-updates/2016-08/msg00106.html http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2014-003/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3945`	vulnerable	2026-06-08 05:05:43.552838	Details available The Authentication component in TYPO3 before 6.2, when salting for password hashing is disabled, does not require knowledge of the cleartext password if the password hash is known, which allows remote attackers to bypass authentication and gain access to the backend by leveraging knowledge of a password hash. Published: 2014-06-03T14:00:00.000Z Updated: 2024-08-06T10:57:17.942Z Open on db.gcve.eu Reference links http://www.debian.org/security/2014/dsa-2942 http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2014-001/ http://www.openwall.com/lists/oss-security/2014/06/03/2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3943`	vulnerable	2026-06-08 05:05:43.472905	Details available Multiple cross-site scripting (XSS) vulnerabilities in unspecified backend components in TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, 6.1.0 before 6.1.9, and 6.2.0 before 6.2.3 allow remote authenticated editors to inject arbitrary web script or HTML via unknown parameters. Published: 2014-06-03T14:00:00.000Z Updated: 2024-08-06T10:57:17.932Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-updates/2014-06/msg00037.html http://www.debian.org/security/2014/dsa-2942 http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2014-001/ http://www.openwall.com/lists/oss-security/2014/06/03/2 http://www.securityfocus.com/bid/67625	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3942`	vulnerable	2026-06-08 05:05:43.469819	Details available The Color Picker Wizard component in TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, and 6.1.0 before 6.1.9 allows remote authenticated editors to execute arbitrary PHP code via a serialized PHP object. Published: 2014-06-03T14:00:00.000Z Updated: 2024-08-06T10:57:17.967Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-updates/2014-06/msg00037.html http://www.debian.org/security/2014/dsa-2942 http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2014-001/ http://www.openwall.com/lists/oss-security/2014/06/03/2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3941`	vulnerable	2026-06-08 05:05:43.434402	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-7081`	vulnerable	2026-06-08 05:05:08.311342	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-7080`	vulnerable	2026-06-08 05:05:08.310090	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-7079`	vulnerable	2026-06-08 05:05:08.308273	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-7078`	vulnerable	2026-06-08 05:05:08.303795	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-7076`	vulnerable	2026-06-08 05:05:08.284492	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-7075`	vulnerable	2026-06-08 05:05:08.282283	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-7074`	vulnerable	2026-06-08 05:05:08.275955	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-7073`	vulnerable	2026-06-08 05:05:08.274304	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.