Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Owasp Api Bfla Owasp Api Bola Owasp Api Broken Auth Owasp Api Broken Object Prop Auth Owasp Api Dos Owasp Api Improper Inventory Management Owasp Api Misconfiguration Owasp Api Ssrf Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity TYPO3 Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2010-1153) CVE-2010-1153 CWE-94 CWE-94 Medium TYPO3 Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2011-4614) CVE-2011-4614 CWE-94 CWE-94 Medium TYPO3 Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2013-4321) CVE-2013-4321 CWE-94 CWE-94 Medium TYPO3 Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-3942) CVE-2014-3942 CWE-94 CWE-94 Medium TYPO3 Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2022-23503) CVE-2022-23503 CWE-94 CWE-94 High TYPO3 Improper Input Validation Vulnerability (CVE-2009-0258) CVE-2009-0258 CWE-20 CWE-20 Critical TYPO3 Improper Input Validation Vulnerability (CVE-2010-3667) CVE-2010-3667 CWE-20 CWE-20 Medium TYPO3 Improper Input Validation Vulnerability (CVE-2010-3716) CVE-2010-3716 CWE-20 CWE-20 Medium TYPO3 Improper Input Validation Vulnerability (CVE-2010-4068) CVE-2010-4068 CWE-20 CWE-20 Medium TYPO3 Improper Input Validation Vulnerability (CVE-2010-5099) CVE-2010-5099 CWE-20 CWE-20 Medium TYPO3 Improper Input Validation Vulnerability (CVE-2011-4902) CVE-2011-4902 CWE-20 CWE-20 Medium TYPO3 Improper Input Validation Vulnerability (CVE-2011-4904) CVE-2011-4904 CWE-20 CWE-20 Medium TYPO3 Improper Input Validation Vulnerability (CVE-2012-1608) CVE-2012-1608 CWE-20 CWE-20 Medium TYPO3 Improper Input Validation Vulnerability (CVE-2013-4250) CVE-2013-4250 CWE-20 CWE-20 Medium TYPO3 Improper Input Validation Vulnerability (CVE-2013-7079) CVE-2013-7079 CWE-20 CWE-20 Medium TYPO3 Improper Input Validation Vulnerability (CVE-2014-3941) CVE-2014-3941 CWE-20 CWE-20 Medium TYPO3 Improper Input Validation Vulnerability (CVE-2014-9509) CVE-2014-9509 CWE-20 CWE-20 High TYPO3 Improper Input Validation Vulnerability (CVE-2015-8760) CVE-2015-8760 CWE-20 CWE-20 Medium TYPO3 Improper Input Validation Vulnerability (CVE-2019-11832) CVE-2019-11832 CWE-20 CWE-20 High TYPO3 Improper Input Validation Vulnerability (CVE-2020-15099) CVE-2020-15099 CWE-20 CWE-20 High TYPO3 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2010-5101) CVE-2010-5101 CWE-22 CWE-22 Medium TYPO3 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2010-5102) CVE-2010-5102 CWE-22 CWE-22 Medium TYPO3 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-19848) CVE-2019-19848 CWE-22 CWE-22 High TYPO3 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-30451) CVE-2023-30451 CWE-22 CWE-22 Medium TYPO3 Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2014-9508) CVE-2014-9508 CWE-59 CWE-59 Medium TYPO3 Improperly Controlled Modification of Dynamically-Determined Object Attributes Vulnerability (CVE-2020-11066) CVE-2020-11066 CWE-915 CWE-915 Critical TYPO3 Improper Neutralization of HTTP Headers for Scripting Syntax Vulnerability (CVE-2021-41114) CVE-2021-41114 CWE-644 CWE-644 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-2718) CVE-2008-2718 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-5644) CVE-2008-5644 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-5656) CVE-2008-5656 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-6699) CVE-2008-6699 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-0257) CVE-2009-0257 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-0816) CVE-2009-0816 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-3629) CVE-2009-3629 CWE-707 CWE-707 Low TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-3634) CVE-2009-3634 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-3636) CVE-2009-3636 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-3659) CVE-2010-3659 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-3660) CVE-2010-3660 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-3665) CVE-2010-3665 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-3672) CVE-2010-3672 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-3674) CVE-2010-3674 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-3715) CVE-2010-3715 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-5097) CVE-2010-5097 CWE-707 CWE-707 Low TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-5098) CVE-2010-5098 CWE-707 CWE-707 Low TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-5100) CVE-2010-5100 CWE-707 CWE-707 Low TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4626) CVE-2011-4626 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4629) CVE-2011-4629 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4630) CVE-2011-4630 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4631) CVE-2011-4631 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4632) CVE-2011-4632 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4903) CVE-2011-4903 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-1606) CVE-2012-1606 CWE-707 CWE-707 Low TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2112) CVE-2012-2112 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3528) CVE-2012-3528 CWE-707 CWE-707 Low TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3531) CVE-2012-3531 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-6145) CVE-2012-6145 CWE-707 CWE-707 Low TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-6147) CVE-2012-6147 CWE-707 CWE-707 Low TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-6148) CVE-2012-6148 CWE-707 CWE-707 Low TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-7074) CVE-2013-7074 CWE-707 CWE-707 Low TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-7076) CVE-2013-7076 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-7077) CVE-2013-7077 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-7078) CVE-2013-7078 CWE-707 CWE-707 Low TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-3943) CVE-2014-3943 CWE-707 CWE-707 Low TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-5956) CVE-2015-5956 CWE-707 CWE-707 Low TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-8755) CVE-2015-8755 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-8756) CVE-2015-8756 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-8757) CVE-2015-8757 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-8758) CVE-2015-8758 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-8759) CVE-2015-8759 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-4056) CVE-2016-4056 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-6905) CVE-2018-6905 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-12748) CVE-2019-12748 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-8091) CVE-2020-8091 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11064) CVE-2020-11064 CWE-707 CWE-707 Medium TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11065) CVE-2020-11065 CWE-707 CWE-707 Medium 1...175176177178...307 176 / 307
