Login Request a demo
ZF
Product
Zend Framework
by Zend · last CVE Apr 4, 2023
27
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities27In the news0Timeline
Severity mix
Critical 11High 3Medium 3Low 0
Severity
All severities27Critical11High3Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Zend Framework to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2015-3154
6.1
1%
Jan 27
CRLF injection vulnerability in Zend\Mail (Zend_Mail) in Zend Framework before 1.12.12, 2.x before 2.3.8, and 2.4.x before 2.4.1 allows remote attackers to inject arbitrary HTTP…
Affected: before 1.12.12; 2.3.0 before 2.3.8; 2.4.0 before 2.4.1
CVE-2012-4451
6.1
1%
Jan 3
Multiple cross-site scripting (XSS) vulnerabilities in Zend Framework 2.0.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified input to (1)…
Affected: before 2.0.1
CVE-2014-4913
6.1
1%
Dec 15
ZF2014-03 has a potential cross site scripting vector in multiple view helpers
Affected: before 2.2.7; 2.3.0 before 2.3.1
Showing 3