PL
Product
Plone
103
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 3High 15Medium 30Low 0
Watch
Add Plone to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2006-4249 | – | Dec 7 | Unspecified vulnerability in PlonePAS in Plone 2.5 and 2.5.1, when anonymous member registration is enabled, allows an attacker to "masquerade as a group." Affected: 2.5; 2.5.1 |
| CVE-2006-4247 | – | Sep 29 | Unspecified vulnerability in the Password Reset Tool before 0.4.1 on Plone 2.5 and 2.5.1 Release Candidate allows attackers to reset the passwords of other users, related to "an… Affected: 2.5; 2.5.1_rc |
| CVE-2006-1711 | – | Apr 11 | Plone 2.0.5, 2.1.2, and 2.5-beta1 does not restrict access to the (1) changeMemberPortrait, (2) deletePersonalPortrait, and (3) testCurrentPassword methods, which allows remote… Affected: 2.0.5; 2.1.2; 2.5_beta1 |