Login Request a demo
TY
Product
typo3
by TYPO3 · last CVE Apr 21, 2026
218
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities218In the news0Timeline
Severity mix
Critical 3High 35Medium 95Low 4
Severity
All severities218Critical3High35Medium95Low4
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add typo3 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-11066
10.0
2%
May 14
In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.17 and greater than or equal to 10.0.0 and less than 10.4.2, calling unserialize() on malicious user-submitted…
Affected: 9.0.0 before 9.5.17; 10.0.0 before 10.4.2
CVE-2011-3583
9.8
1%
Nov 26
It was found that Typo3 Core versions 4.5.0 - 4.5.5 uses prepared statements that, if the parameter values are not properly replaced, could lead to a SQL Injection vulnerability
Affected: 4.5.0 through 4.5.5
CVE-2011-4628
9.8
2%
Nov 6
TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to bypass authentication mechanisms in the backend through a crafted request
Affected: 4.3.0 before 4.3.12; 4.4.0 before 4.4.9; 4.5.0 before 4.5.4
Showing 3