Zend 漏洞

时间轴

类型

Programming Tool Software24
Not Defined13
Software Library1

产品

Zend Framework21
Zend Server6
Zend Zend Framework2
Zend Engine2
Zend Studio1

修正

Official Fix29
Temporary Fix0
Workaround1
Unavailable0
Not Defined8

易受攻击性

High2
Functional0
Proof-of-Concept16
Unproven8
Not Defined12

访问向量

Not Defined0
Physical0
Local3
Adjacent0
Network35

身份验证

Not Defined0
High0
Low3
None35

用户交互

Not Defined0
Required10
None28

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤52
≤615
≤74
≤87
≤97
≤103

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤514
≤64
≤79
≤87
≤92
≤102

VulDB

≤10
≤20
≤30
≤40
≤53
≤614
≤75
≤87
≤96
≤103

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤71
≤80
≤90
≤103

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k0
<2k0
<5k0
<10k12
<25k21
<50k4
<100k1
≥100k0

本日攻击

<1k33
<2k2
<5k1
<10k2
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (11): Engine (2), Framework (21), Optimizer (1), Server (6), Studio (1), Zend Framework (2), Zend Framework Preview (1), Zend Google Data Client Library Preview (1), Zend Platform (1), Zend Server (1), ZendTo (1)

已发布BaseTemp漏洞Prod易修正EPSSCTICVE
2023-04-048.08.0Zend Framework unserialize 权限升级Programming Tool SoftwareNot DefinedNot Defined0.010770.03CVE-2020-29312
2016-10-125.34.8Zend Studio File Permission 权限升级未知Proof-of-ConceptNot Defined0.000000.00
2016-06-079.89.4Zend Framework PDO Adapter SQL注入Programming Tool SoftwareNot DefinedOfficial Fix0.016250.04CVE-2015-7695
2015-08-135.34.6Zend Framework Zend_XmlRpc_Server XML External EntityProgramming Tool SoftwareProof-of-ConceptOfficial Fix0.079110.02CVE-2015-5161
2014-10-108.58.4Zend Framework SQL注入Programming Tool SoftwareHighOfficial Fix0.003750.02CVE-2014-8089
2014-10-105.34.6Zend Framework ldap_bind 弱身份验证Programming Tool SoftwareUnprovenOfficial Fix0.006000.02CVE-2014-8088
2014-09-047.37.0Zend Framework 弱身份验证Programming Tool SoftwareNot DefinedOfficial Fix0.015630.00CVE-2014-2685
2014-06-127.36.6Zend Framework SQL Statement order SQL注入Programming Tool SoftwareProof-of-ConceptOfficial Fix0.000000.04
2014-04-175.24.9Zend Framework View Helper escapeHtml 跨网站脚本Programming Tool SoftwareHighOfficial Fix0.013450.02CVE-2014-4913
2014-03-215.34.6Zend Framework XML 拒绝服务Programming Tool SoftwareUnprovenOfficial Fix0.005610.02CVE-2014-2681

28 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 28 results.

◂ 上一步一览下一步 ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!