Zend Vulnerabilità

Sequenza temporale

Genere

Programming Tool Software	20
Not Defined	18

Prodotto

Zend Framework	16
Zend Server	10
Zend Engine	4
Zend Zend Framework	4
Zend Studio	2

Contromisure

Official Fix	32
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	6

Sfruttabilità

High	0
Functional	0
Proof-of-Concept	20
Unproven	8
Not Defined	10

Accesso al vettore

Not Defined	0
Physical	0
Local	2
Adjacent	0
Network	36

Autenticazione

Not Defined	0
High	0
Low	4
None	34

Interazione dell'utente

Not Defined	0
Required	12
None	26

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	16
≤7	2
≤8	6
≤9	10
≤10	2

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	0
≤5	14
≤6	6
≤7	4
≤8	12
≤9	0
≤10	2

VulDB

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	16
≤7	4
≤8	4
≤9	10
≤10	2

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	2

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Fornitore

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploiter 0 giorni

<1k	0
<2k	0
<5k	0
<10k	8
<25k	24
<50k	6
<100k	0
≥100k	0

Exploiter aujourd'hui

<1k	34
<2k	2
<5k	0
<10k	2
<25k	0
<50k	0
<100k	0
≥100k	0

Sfrutta il volume del mercato

🔴 CTI Attività

Affected Products (11): Engine (2), Framework (21), Optimizer (1), Server (6), Studio (1), Zend Framework (2), Zend Framework Preview (1), Zend Google Data Client Library Preview (1), Zend Platform (1), Zend Server (1), ZendTo (1)

Data di pubblicazione	Base	Temp	Vulnerabilità	Prod	Sfr	Con	EPSS	CTI	CVE
04/04/2023	8.0	8.0	Zend Framework unserialize escalazione di privilegi	Programming Tool Software	Not Defined	Not Defined	0.01077	0.03	CVE-2020-29312
12/10/2016	5.3	4.8	Zend Studio File Permission escalazione di privilegi	Sconosciuto	Proof-of-Concept	Not Defined	0.00000	0.00
07/06/2016	9.8	9.4	Zend Framework PDO Adapter sql injection	Programming Tool Software	Not Defined	Official Fix	0.01625	0.04	CVE-2015-7695
13/08/2015	5.3	4.6	Zend Framework Zend_XmlRpc_Server XML External Entity	Programming Tool Software	Proof-of-Concept	Official Fix	0.07911	0.02	CVE-2015-5161
10/10/2014	8.5	8.4	Zend Framework sql injection	Programming Tool Software	High	Official Fix	0.00375	0.02	CVE-2014-8089
10/10/2014	5.3	4.6	Zend Framework ldap_bind autenticazione debole	Programming Tool Software	Unproven	Official Fix	0.00600	0.02	CVE-2014-8088
04/09/2014	7.3	7.0	Zend Framework autenticazione debole	Programming Tool Software	Not Defined	Official Fix	0.01563	0.00	CVE-2014-2685
12/06/2014	7.3	6.6	Zend Framework SQL Statement order sql injection	Programming Tool Software	Proof-of-Concept	Official Fix	0.00000	0.04
17/04/2014	5.2	4.9	Zend Framework View Helper escapeHtml cross site scripting	Programming Tool Software	High	Official Fix	0.01345	0.02	CVE-2014-4913
21/03/2014	5.3	4.6	Zend Framework XML denial of service	Programming Tool Software	Unproven	Official Fix	0.00561	0.02	CVE-2014-2681

28 non vengono visualizzate più voci

🔒 Login Required

You need to signup and login to see more of the remaining 28 results.

◂ PrecedenteVisione D'insiemeIl prossimo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!