Login Request a demo
PL
Product
Plone
by Plone · last CVE Mar 6, 2024
103
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities103In the news0Timeline
Severity mix
Critical 3High 15Medium 30Low 0
Severity
All severities103Critical3High15Medium30Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Plone to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-33509
9.9
2%
May 21
Plone through 5.2.4 allows remote authenticated managers to perform disk I/O via crafted keyword arguments to the ReStructuredText transform in a Python script
Affected: through 5.2.4
CVE-2020-35190
9.8
2%
Dec 17
The official plone Docker images before version of 4.3.18-alpine (Alpine specific) contain a blank password for a root user
Affected: 4.0.0-alpine before 4.3.18-alpine
CVE-2020-7941
9.8
2%
Jan 23
A privilege escalation issue in plone.app.contenttypes in Plone 4.3 through 5.2.1 allows users to PUT (overwrite) some content without needing write permission
Affected: 4.3.0 through 5.2.1
Showing 3