CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:NCVE-2025-46047
Medium (6.5) in silverpeas silverpeas. EPSS 0.4% chance of exploitation in the next 30 days. Fixed in org.silverpeas.core:silverpeas-core 6.4.3.
A User enumeration vulnerability in the /CredentialsServlet/ForgotPassword endpoint in Silverpeas 6.4.1 and 6.4.2 allows remote attackers to determine valid usernames via the Login parameter.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 29% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- silverpeas:silverpeas
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-cv2m-5pfp-f245 | Maven | org.silverpeas.core:silverpeas-core | >=6.4.1 <6.4.3 | 6.4.3 |