GCVE - cpe:2.3:a:typo3:typo3:6.2.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:typo3:typo3:6.2.2:*:*:*:*:*:*:*

part: a version: 6.2.2 update: *

Vendor	Typo3 (`bebcd01c-0947-5641-89ed-9b814cca944e`)
Product	Typo3 (`e0e75c36-ce92-5448-bdce-8b59acd8c849`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/typo3/typo3`	purl2cpe	2026-06-01 10:16:08.686838
`pkg:typo3/typo3.cms.git`	purl2cpe	2026-06-01 10:16:08.686839

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-4056`	vulnerable	2026-06-08 05:07:46.608116	Details available Cross-site scripting (XSS) vulnerability in the Backend component in TYPO3 6.2.x before 6.2.19 allows remote attackers to inject arbitrary web script or HTML via the module parameter when creating a bookmark. Published: 2017-01-23T21:00:00.000Z Updated: 2024-08-06T00:17:30.841Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2016/04/21/1 https://labs.integrity.pt/advisories/cve-pending-stored-cross-site-scripting-in-typo3-bookmarks/ https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-006/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-8760`	vulnerable	2026-06-08 05:07:04.842064	Details available The Flvplayer component in TYPO3 6.2.x before 6.2.16 allows remote attackers to embed Flash videos from external domains via unspecified vectors, aka "Cross-Site Flashing." Published: 2016-01-08T19:00:00.000Z Updated: 2024-09-16T20:16:51.620Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1034485 http://www.securityfocus.com/bid/79210 http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-014/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-8759`	vulnerable	2026-06-08 05:07:04.840964	Details available Cross-site scripting (XSS) vulnerability in the typoLink function in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote authenticated editors to inject arbitrary web script or HTML via a link field. Published: 2016-01-08T19:00:00.000Z Updated: 2024-09-16T19:10:11.966Z Open on db.gcve.eu Reference links http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-012/ http://www.securityfocus.com/bid/79250	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-8758`	vulnerable	2026-06-08 05:07:04.839852	Details available Multiple cross-site scripting (XSS) vulnerabilities in unspecified frontend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allow remote authenticated editors to inject arbitrary web script or HTML via unknown vectors. Published: 2016-01-08T19:00:00.000Z Updated: 2024-09-17T04:19:06.865Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1034484 http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-013/ http://www.securityfocus.com/bid/79240	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-8757`	vulnerable	2026-06-08 05:07:04.832793	Details available Cross-site scripting (XSS) vulnerability in the Extension Manager in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to extension data during an extension installation. Published: 2016-01-08T19:00:00.000Z Updated: 2024-09-16T22:46:11.762Z Open on db.gcve.eu Reference links http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-010/ http://www.securityfocus.com/bid/79254 http://www.securitytracker.com/id/1034482	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-8756`	vulnerable	2026-06-08 05:07:04.831801	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-8755`	vulnerable	2026-06-08 05:07:04.818241	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-5956`	vulnerable	2026-06-08 05:06:51.065378	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-9509`	vulnerable	2026-06-08 05:06:12.072911	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-9508`	vulnerable	2026-06-08 05:06:12.066121	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3946`	vulnerable	2026-06-08 05:05:43.558016	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3944`	vulnerable	2026-06-08 05:05:43.473418	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3943`	vulnerable	2026-06-08 05:05:43.472430	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3941`	vulnerable	2026-06-08 05:05:43.456975	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.