Login Request a demo
ZF
Product
Zend Framework
by Zend · last CVE Apr 4, 2023
27
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities27In the news0Timeline
Severity mix
Critical 11High 3Medium 3Low 0
Severity
All severities27Critical11High3Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Zend Framework to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2015-1786
8.8
1%
Jun 8
Cross-site request forgery (CSRF) vulnerability in Zend/Validator/Csrf in Zend Framework 2.3.x before 2.3.6 via null or malformed token identifiers
Affected: 2.3.0; 2.3.1; 2.3.2; 2.3.3; 2.3.4; 2.3.5
CVE-2015-5723
7.8
0%
Jun 7
Doctrine Annotations before 1.2.7, Cache before 1.3.2 and 1.4.x before 1.4.2, Common before 2.4.3 and 2.5.x before 2.5.1, ORM before 2.4.8 or 2.5.x before 2.5.1, MongoDB ODM…
Affected: through 2.4.7; through 1.12.15
CVE-2015-7503
7.5
1%
Oct 10
Zend Framework before 2.4.9, zend-framework/zend-crypt 2.4.x before 2.4.9, and 2.5.x before 2.5.2 allows remote attackers to recover the RSA private key
Affected: 2.4.0; 2.4.1; 2.4.2; 2.4.3; 2.4.4; 2.4.5; +5 more
Showing 3