← Database

CVE-2025-46047

MEDIUM CVSS: 6.5 Published: 2025-09-02 Modified: 2026-06-17

Description

A User enumeration vulnerability in the /CredentialsServlet/ForgotPassword endpoint in Silverpeas 6.4.1 and 6.4.2 allows remote attackers to determine valid usernames via the Login parameter.

Affected Platforms

Silverpeas Silverpeas

Weakness Type

CWE-20

References