Login Request a demo
ZO
Product
Zope
by Zope · last CVE Oct 4, 2023
36
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities36In the news0Timeline
Severity mix
Critical 0High 4Medium 5Low 0
Severity
All severities36Critical0High4Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Zope to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-33507
6.1
1%
May 21
Zope Products.CMFCore before 2.5.1 and Products.PluggableAuthService before 2.6.2, as used in Plone through 5.2.4 and other products, allow Reflected XSS
Affected: before 2.5.1
CVE-2011-4924
6.1
1%
Nov 25
Cross-site scripting (XSS) vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3, 3.1.1 through…
Affected: 2.8.0 before 2.8.12; 2.9.0 before 2.9.12; 2.10.0 before 2.10.11; 2.11.0 before 2.11.6; 2.12.0 before 2.12.3; 3.1.1 through 3.4.1
CVE-2009-5145
6.1
2%
Aug 7
Cross-site scripting (XSS) vulnerability in ZMI pages that use the manage_tabs_message in Zope 2.11.4, 2.11.2, 2.10.9, 2.10.7, 2.10.6, 2.10.5, 2.10.4, 2.10.2, 2.10.1, 2.12
Affected: 2.10.1; 2.10.2; 2.10.4; 2.10.5; 2.10.6; 2.10.7; +4 more
CVE-2023-42458
5.4
1%
Sep 21
Zope is an open-source web application server
Affected: before 4.8.10; 5.0.0 before 5.8.5
CVE-2023-44389
4.8
0%
Oct 4
Zope is an open-source web application server
Affected: 4.0 before 4.8.11; 5.0 before 5.8.6
Showing 5