Plone Luki w zabezpieczeniach

Oś czasu

Rodzaj

Content Management System	19
Virtualization Software	3

Produkt

Plone CMS	16
Plone Docker Official Image	2
Plone Official Docker	1
Plone Products.ATContentTypes	1
Plone CMFEditions	1

Przeciwdziałanie

Official Fix	14
Temporary Fix	1
Workaround	0
Unavailable	0
Not Defined	7

Wykorzystywanie

High	1
Functional	0
Proof-of-Concept	2
Unproven	4
Not Defined	15

Wektor dostępu

Not Defined	0
Physical	0
Local	0
Adjacent	2
Network	20

Uwierzytelnianie

Not Defined	0
High	0
Low	8
None	14

Interakcja z użytkownikiem

Not Defined	0
Required	10
None	12

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	1
≤5	3
≤6	8
≤7	5
≤8	3
≤9	0
≤10	2

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	1
≤5	4
≤6	9
≤7	5
≤8	1
≤9	1
≤10	1

VulDB

≤1	0
≤2	0
≤3	0
≤4	4
≤5	5
≤6	1
≤7	7
≤8	3
≤9	0
≤10	2

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	1
≤7	6
≤8	1
≤9	1
≤10	1

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	1
≤6	0
≤7	1
≤8	0
≤9	0
≤10	0

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	7
<2k	10
<5k	5
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj dzisiaj

<1k	19
<2k	3
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (6): CMFEditions (1), CMS (16), Docker Official Image (2), Official Docker (1), PlonePAS (1), Products.ATContentTypes (1)

Opublikowano	Base	Temp	Słaby punkt	Prod	Wyk	Prz	EPSS	CTI	CVE
2024-02-09	6.9	6.8	Plone Official Docker HTTP Method privilege escalation	Virtualization Software	Not Defined	Not Defined	0.00048	0.03	CVE-2024-23756
2024-02-05	8.0	8.0	Plone Docker Official Image privilege escalation	Virtualization Software	Not Defined	Not Defined	0.00387	0.02	CVE-2024-23054
2024-01-25	6.2	6.2	Plone Docker Official Image Header Privilege Escalation	Virtualization Software	Not Defined	Not Defined	0.00134	0.03	CVE-2024-23055
2024-01-18	4.9	4.8	Plone CMS URL cross site scripting	Content Management System	Not Defined	Official Fix	0.00046	0.02	CVE-2024-0669
2023-02-18	6.1	6.1	Plone CMS RSS Feed Portlet information disclosure	Content Management System	Not Defined	Not Defined	0.00145	0.03	CVE-2021-33926
2022-01-29	5.3	5.2	Plone Products.ATContentTypes Redirect	Content Management System	Not Defined	Official Fix	0.00061	0.04	CVE-2022-23599
2021-05-21	3.5	3.2	Plone CMS File Upload cross site scripting	Content Management System	Proof-of-Concept	Official Fix	0.00084	0.00	CVE-2021-3313
2021-03-24	4.4	4.2	Plone CMS site-controlpanel cross site scripting	Content Management System	Proof-of-Concept	Not Defined	0.00078	0.00	CVE-2021-29002
2017-03-23	5.8	5.8	Plone CMS Sandbox format privilege escalation	Content Management System	Not Defined	Not Defined	0.00095	0.00	CVE-2017-5524
2016-10-12	6.2	6.0	Plone CMS Redirect	Content Management System	Not Defined	Official Fix	0.00338	0.00	CVE-2016-7137

12 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 12 results.

◂ PoprzedniPrzeglądKolejny ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!