How many CVEs does TYPO3 TYPO3 CMS Core have?

TYPO3 TYPO3 CMS Core has 2 published CVE records since 2025.

How many TYPO3 TYPO3 CMS Core CVEs are in CISA KEV?

None of TYPO3 TYPO3 CMS Core's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most common weakness types in TYPO3 TYPO3 CMS Core CVEs?

TYPO3 TYPO3 CMS Core's CVEs most often map to these CWE weakness types: CWE-331 (Insufficient Entropy), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')).

What is the average severity of TYPO3 TYPO3 CMS Core CVEs?

The average CVSS base score across TYPO3 TYPO3 CMS Core's scored CVEs is 5.8.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

TYPO3

2 CVEs

TYPO3 CMS Core Vulnerabilities

Name: TYPO3 CMS Core vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for TYPO3 CMS Core by TYPO3.

2

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

5.8

Avg CVSS

2025–2025

Last updated September 9, 2025

Overview

TYPO3 CMS Core has 2 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 5.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting TYPO3 CMS Core, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of TYPO3 CMS Core's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High0

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of TYPO3 CMS Core's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No TYPO3 CMS Core CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every TYPO3 CMS Core version named in a CVE, then pick one to see only the CVEs that affect it.

No specific affected versions are recorded for TYPO3 CMS Core; the CVEs below apply to the product without a version pin.

2 CVEs

Sort

Insufficient Entropy in Password Generation
CVE-2025-59015
Patch
CWE-331
Medium · CVSS 6.3
EPSS 0.2% (7th pct)2025-09-09
Open Redirect in TYPO3 CMS
CVE-2025-59013
Patch
CWE-601
Medium · CVSS 5.3
EPSS 0.2% (7th pct)2025-09-09

Common weakness types

The CWE weakness categories most often found in TYPO3 CMS Core CVEs. Follow any weakness for its full explanation.

Other TYPO3 products

Browse vulnerabilities for other products by TYPO3.

typo3490 CVEs typo3/cms106 CVEs typo3.cms94 CVEs typo3/cms-core73 CVEs TYPO3 CMS34 CVEs typo3/cms-backend8 CVEs html sanitizer6 CVEs html-sanitizer6 CVEs

All TYPO3 vulnerabilities

Frequently asked questions

Common questions about TYPO3 CMS Core vulnerabilities.

How many CVEs does TYPO3 TYPO3 CMS Core have?: TYPO3 TYPO3 CMS Core has 2 published CVE records since 2025.
How many TYPO3 TYPO3 CMS Core CVEs are in CISA KEV?: None of TYPO3 TYPO3 CMS Core's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for TYPO3 TYPO3 CMS Core vulnerabilities?: No TYPO3 TYPO3 CMS Core CVEs currently have a tracked public exploit in this dataset.
What are the most common weakness types in TYPO3 TYPO3 CMS Core CVEs?: TYPO3 TYPO3 CMS Core's CVEs most often map to these CWE weakness types: CWE-331 (Insufficient Entropy), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')).
What is the average severity of TYPO3 TYPO3 CMS Core CVEs?: The average CVSS base score across TYPO3 TYPO3 CMS Core's scored CVEs is 5.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track TYPO3 CMS Core vulnerabilities

Monitor new TYPO3 CMS Core vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing