Zope Sårbarheter

Tidslinje

Typ

Application Server Software9

Produkt

Zope ZODB4
Zope AccessControl2
Zope Web Application Server2
Zope Products.CMFCore1
Zope Products.PluggableAuthService1

Åtgärd

Official Fix8
Temporary Fix0
Workaround0
Unavailable0
Not Defined1

Utnyttjbarhet

High0
Functional0
Proof-of-Concept1
Unproven0
Not Defined8

Åtkomstvektor

Not Defined0
Physical0
Local1
Adjacent0
Network8

Autentisering

Not Defined0
High2
Low5
None2

Användarinteraktion

Not Defined0
Required1
None8

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤41
≤52
≤63
≤72
≤81
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤51
≤65
≤71
≤80
≤90
≤100

VulDB

≤10
≤20
≤31
≤41
≤52
≤62
≤72
≤81
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤81
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤71
≤80
≤90
≤100

Säljare

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Utnyttja 0-dagars

<1k1
<2k3
<5k5
<10k0
<25k0
<50k0
<100k0
≥100k0

Utnyttja idag

<1k9
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Utnyttja marknadsvolymen

Affected Products (5): AccessControl (2), Products.CMFCore (1), Products.PluggableAuthService (1), Web Application Server (2), ZODB (4)

PubliceradBaseTempSårbarhetProdUtnRemEPSSCTICVE
07/09/20235.75.7Zope AccessControl informationsgivningApplication Server SoftwareNot DefinedOfficial Fix0.000490.02CVE-2023-41050
03/08/20215.04.8Zope Web Application Server Python 3 Products.PythonScripts Privilege EscalationApplication Server SoftwareNot DefinedOfficial Fix0.009140.00CVE-2021-32811
31/07/20214.13.9Zope AccessControl Privilege EscalationApplication Server SoftwareNot DefinedOfficial Fix0.008660.00CVE-2021-32807
22/05/20213.53.4Zope Products.CMFCore/Products.PluggableAuthService cross site scriptingApplication Server SoftwareNot DefinedOfficial Fix0.000840.00CVE-2021-33507
19/10/20105.35.1Zope ZODB accept tävlingsvillkorApplication Server SoftwareNot DefinedOfficial Fix0.037610.00CVE-2010-3495
08/09/20096.35.7Zope ZODB Privilege EscalationApplication Server SoftwareProof-of-ConceptOfficial Fix0.002310.00CVE-2009-2701
06/08/20097.37.0Zope ZODB svag autentiseringApplication Server SoftwareNot DefinedOfficial Fix0.017840.00CVE-2009-0669
06/08/20096.36.0Zope ZODB privilegier eskaleringApplication Server SoftwareNot DefinedOfficial Fix0.005710.00CVE-2009-0668
01/01/20045.35.3Zope Web Application Server privilegier eskaleringApplication Server SoftwareNot DefinedNot Defined0.000000.00

◂ TidigareÖversiktNästa ▸

Do you need the next level of professionalism?

Upgrade your account now!