Product by TYPO3
TYPO3
218 known vulnerabilities in TYPO3 (TYPO3), 0 of them actively exploited (CISA KEV).
Key figures
218
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2009-0255 | TYPO3: security vulnerability | 7.5 | |
| High | CVE-2016-5091 | TYPO3: Information Disclosure | 8.1 | |
| High | CVE-2019-11832 | TYPO3: Remote Code Execution | 7.5 | |
| High | CVE-2010-3663 | TYPO3: Code Execution | 8.8 | |
| High | CVE-2017-14251 | TYPO3: Unrestricted File Upload | 8.8 | |
| High | CVE-2020-15098 | Missing Required Cryptographic Step Leading to Sensitive Information Disclosure in TYPO3 CMS | 8.8 | |
| High | CVE-2020-11067 | Deserialization of Untrusted Data in TYPO3 CMS | 8.8 | |
| Critical | CVE-2011-4628 | TYPO3: Authentication Bypass | 9.8 | |
| High | CVE-2024-22188 | TYPO3: Command Injection | 7.2 | |
| Medium | CVE-2020-8091 | TYPO3: Cross-Site Scripting (XSS) | 4.8 | |
| Critical | CVE-2011-3583 | TYPO3 Core: SQL Injection | 9.8 | |
| High | CVE-2020-15099 | Exposure of Sensitive Information to an Unauthorized Actor in TYPO3 CMS | 8.1 | |
| High | CVE-2021-21355 | Unrestricted File Upload in Form Framework | 8.6 | |
| High | CVE-2019-12747 | TYPO3: Deserialization of Untrusted Data | 8.8 | |
| Critical | CVE-2020-11066 | Improperly Controlled Modification of Dynamically-Determined Object Attributes in TYPO3 CMS | 8.7 | |
| High | CVE-2021-21357 | Broken Access Control in Form Framework | 8.3 | |
| High | CVE-2019-19849 | TYPO3: Deserialization of Untrusted Data | 8.8 | |
| High | CVE-2010-3662 | TYPO3: SQL Injection | 8.8 | |
| Medium | CVE-2010-3671 | TYPO3: Session Fixation | 6.5 | |
| Medium | CVE-2018-6905 | TYPO3: Cross-Site Scripting (XSS) | 4.8 | |
| Not rated | CVE-2009-0815 | TYPO3: security vulnerability | — | |
| High | CVE-2021-21359 | Denial of Service in Page Error Handling | 5.9 | |
| High | CVE-2019-19848 | TYPO3: Path Traversal | 6.8 | |
| High | CVE-2022-36104 | Denial of Service via Page Error Handling in TYPO3/cms | 5.9 | |
| High | CVE-2010-3668 | TYPO3: security vulnerability | 7.5 |