Typo3 Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

Content Management System	94
Photo Gallery Software	6
Anti-Spam Software	2
Calendar Software	2
Database Administration Software	2

Product

TYPO3 CMS	8
TYPO3 WEC Discussion Forum	6
TYPO3 Dam Frontend Extension	6
TYPO3 Ws Ecard	4
TYPO3 Sr Feuser Register Extension	4

Remediation

Official Fix	44
Temporary Fix	0
Workaround	0
Unavailable	24
Not Defined	40

Exploitability

High	32
Functional	0
Proof-of-Concept	18
Unproven	22
Not Defined	36

Access Vector

Not Defined	0
Physical	0
Local	0
Adjacent	0
Network	108

Authentication

Not Defined	0
High	0
Low	6
None	102

User Interaction

Not Defined	0
Required	28
None	80

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	2
≤5	28
≤6	14
≤7	2
≤8	58
≤9	0
≤10	4

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	2
≤5	34
≤6	10
≤7	34
≤8	24
≤9	4
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	4
≤5	28
≤6	14
≤7	2
≤8	56
≤9	0
≤10	4

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	2
≤9	4
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	0
≤8	0
≤9	0
≤10	0

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	2
<2k	34
<5k	70
<10k	2
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Today

<1k	108
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

🔴 CTI Activities

Affected Products (76): Address Directory (2), Air Filemanager (2), Another Backend Login (1), Bb Simplejobs (1), Brainstorming (1), Branchenbuch Extension (1), CMS (13), Cms Poll System Extension (1), Codeon Petition Extension (1), Commerce extension (2), Dam Frontend Extension (4), Dictionary Extension (1), Dl3 Tt News Alerts (1), Econda Plugin (1), Eluna Page Comments Extension (2), File List Extension (1), Flow (1), Fluid (1), Freecap Captcha Extension (1), Frontend Users View (1), Fsmi People (1), Industry Database Extension (1), JobControl (1), Job Reports (1), Kb Unpack Extension (1), Kiddog Mysqldumper (1), Kj Imagelightbox2 (1), M1 Intern (1), Majordomo (1), Mannschaftsliste (1), Mimi Tipfriends (1), Mm Whtppr (1), Nd Antispam (1), Neos (1), News Calendar Extension (1), Packman Extension (1), Page Improvements (1), Pb Clanlist (1), Pdf Generator 2 Extension (3), Pinboard extension (1), Pmk Rssnewsexport Extension (1), Rlmp Eventdb (1), SB Universal Plugin (1), Sbanner (1), Secure Directory (1), Send A Card (1), Sg Zfelib (1), Sk Simplegallery (2), Skt Eurocalc (1), Sql Frontend Extension (2), Sr Feuser Register Extension (2), Support View Extension (1), T3m Affiliate (1), TU-Clausthal ODIN (1), TU-Clausthal Staff (1), Terminal (2), Tjs Reslib (1), Toi Category (2), Vd Gemomap (1), Vm19 Userlinks (1), WEC Discussion Forum (4), WT Gallery (1), Wir Ber Uns Extension (1), Ws Ecard (2), Ws Gallery (1), Wt Gallery (1), XDS Staff (1), Zak Store Management (1), advCalendar extension (1), aeurltool (1), autobeuser (1), beuserswitch (2), mjseventpro (1), phpMyAdmin (1), simplesurvey (1), ttpedit (1)

Published	Base	Temp	Vulnerability	Prod	Exp	Rem	EPSS	CTI	CVE
12/13/2022	5.2	5.1	TYPO3 CMS cross site scripting	Content Management System	Not Defined	Official Fix	0.00068	0.00	CVE-2022-23499
12/13/2022	5.7	5.7	TYPO3 CMS Page Error denial of service	Content Management System	Not Defined	Official Fix	0.00078	0.00	CVE-2022-23500
12/13/2022	5.8	5.7	TYPO3 CMS Frontend Login improper authentication	Content Management System	Not Defined	Official Fix	0.00066	0.00	CVE-2022-23501
12/13/2022	5.9	5.7	TYPO3 CMS Password Reset session expiration	Content Management System	Not Defined	Official Fix	0.00051	0.00	CVE-2022-23502
12/13/2022	4.4	4.4	TYPO3 CMS YAML Placeholder Expression information disclosure	Content Management System	Not Defined	Official Fix	0.00088	0.00	CVE-2022-23504
12/13/2022	5.0	4.8	TYPO3 CMS Form Framework code injection	Content Management System	Not Defined	Official Fix	0.00077	0.02	CVE-2022-23503
11/18/2020	5.2	4.9	TYPO3 Fluid cross site scripting	Content Management System	Not Defined	Official Fix	0.00103	0.03	CVE-2020-26216
07/29/2020	6.8	6.0	TYPO3 CMS LocalConfiguration.php information disclosure	Content Management System	Not Defined	Official Fix	0.00944	0.02	CVE-2020-15099
07/29/2020	7.5	6.6	TYPO3 CMS Checksum input validation	Content Management System	Not Defined	Official Fix	0.00318	0.00	CVE-2020-15098
05/14/2020	5.7	5.0	TYPO3 CMS Backend User Interface cross-site request forgery	Content Management System	Not Defined	Official Fix	0.00070	0.02	CVE-2020-11069
05/14/2020	7.5	6.6	TYPO3 CMS deserialization	Content Management System	Not Defined	Official Fix	0.00482	0.00	CVE-2020-11067
05/14/2020	7.6	6.7	TYPO3 CMS unserialize dynamically-determined object attributes	Content Management System	Not Defined	Official Fix	0.00108	0.00	CVE-2020-11066
10/23/2017	4.4	4.3	TYPO3 CMS Extension Manager cross site scripting	Content Management System	Not Defined	Official Fix	0.00134	0.00	CVE-2010-3659
03/17/2017	4.5	4.5	TYPO3 CMS information disclosure	Content Management System	Not Defined	Not Defined	0.00231	0.02	CVE-2017-6370
04/01/2015	5.4	5.2	TYPO3 Neos access control	Content Management System	Not Defined	Official Fix	0.00097	0.04	CVE-2015-2821
12/20/2013	4.3	4.1	TYPO3 Flow Error Message cross site scripting	Content Management System	Not Defined	Official Fix	0.00220	0.00	CVE-2013-7082
02/14/2012	4.3	4.3	TYPO3 aeurltool cross site scripting	Content Management System	Not Defined	Not Defined	0.00136	0.00	CVE-2012-1086
02/14/2012	5.3	5.3	TYPO3 beuserswitch information disclosure	Content Management System	Not Defined	Not Defined	0.00358	0.00	CVE-2012-1085
02/14/2012	4.3	4.3	TYPO3 beuserswitch cross site scripting	Content Management System	Not Defined	Not Defined	0.00220	0.00	CVE-2012-1084
02/14/2012	6.3	6.3	TYPO3 Terminal cross-site request forgery	Content Management System	Not Defined	Not Defined	0.00109	0.00	CVE-2012-1083
02/14/2012	3.5	3.5	TYPO3 Terminal cross site scripting	Content Management System	Not Defined	Not Defined	0.00092	0.00	CVE-2012-1082
02/14/2012	4.3	4.3	Typo3 Skt Eurocalc cross site scripting	Content Management System	Not Defined	Not Defined	0.00136	0.00	CVE-2012-1080
02/14/2012	7.3	6.4	TYPO3 Mm Whtppr sql injection	Content Management System	Unproven	Official Fix	0.00135	0.02	CVE-2012-1074
02/14/2012	4.3	3.8	TYPO3 Toi Category cross site scripting	Content Management System	Unproven	Official Fix	0.00220	0.00	CVE-2012-1073
02/14/2012	7.3	6.4	TYPO3 Toi Category sql injection	Content Management System	Unproven	Official Fix	0.00135	0.00	CVE-2012-1072

82 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 82 results.

◂ PreviousOverviewNext ▸

Interested in the pricing of exploits?

See the underground prices here!