CVE-2024-42849: Silverpeas

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

An issue in Silverpeas v.6.4.2 and lower allows a remote attacker to cause a denial of service via the password change function.

Affected products

• Silverpeas Silverpeas: up to and including 6.4.2

Published 2024-08-16. Last modified 2026-07-05.