Zend

Records48All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical15CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

Zend records in CISA KEV

No Zend vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Zend Framework 27 records HIGH Zendto 6 records MEDIUM Zendopenid 5 records LOW Zend Platform 4 records MEDIUM Framework 3 records MEDIUM Zendrest 3 records LOW Zendservice Amazon 3 records LOW Zendservice Api 3 records LOW

Records

3 records in Framework · all components

TI-2015-00237 CVE-2015-0270 · GHSA-v59p-p692-v382

Zend Framework before 2.2.10 and 2.3.x before 2.3.5 has Potential SQL injection in PostgreSQL Zend\Db adapter.

MEDIUM 44

Zend Framework before 2.2.10 and 2.3.x before 2.3.5 has Potential SQL injection in PostgreSQL Zend\Db adapter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01103 Published 2019-10-25 Fixed in 2.2.10, 2.3.5 CWE-89

TI-2011-03382 CVE-2011-3825 · GHSA-fhjm-rh64-w3x4

Zend Framework 1.11.3 in Zend Server CE 5.1.0 allows remote attackers to obtain sensitive…

LOW 26

Zend Framework 1.11.3 in Zend Server CE 5.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Valid…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01456 Published 2011-09-24 No fix listed CWE-200

TI-2009-04180 CVE-2009-4417 · GHSA-m29x-48p8-pr8r

The shutdown function in the Zend_Log_Writer_Mail class in Zend Framework (ZF) allows…

LOW 24

The shutdown function in the Zend_Log_Writer_Mail class in Zend Framework (ZF) allows context-dependent attackers to send arbitrary e-mail messages to any recipient address via vectors related to "events not yet mailed."

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0086 Published 2009-12-24 No fix listed CWE-264

Open these records in search →

Critical	15
High	8
Medium	25
Low	0
No CVSS	0