Zend

Records48All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical15CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

Zend records in CISA KEV

No Zend vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Zend Framework 27 records HIGH Zendto 6 records MEDIUM Zendopenid 5 records LOW Zend Platform 4 records MEDIUM Framework 3 records MEDIUM Zendrest 3 records LOW Zendservice Amazon 3 records LOW Zendservice Api 3 records LOW

Records

5 records in Zendopenid · all components

TI-2014-02159 CVE-2014-2685 · GHSA-jh3g-pqch-xqxg

The GenericConsumer class in the Consumer component in ZendOpenId before 2.0.2 and the…

LOW 38

The GenericConsumer class in the Consumer component in ZendOpenId before 2.0.2 and the Zend_OpenId_Consumer class in Zend Framework 1 before 1.12.4 violate the OpenID 2.0 protocol by ensuring only that at least one field…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02802 Published 2014-09-04 No fix listed CWE-287

TI-2014-02156 CVE-2014-2682 · GHSA-gp39-h9c2-qw79

Zend Framework 1 (ZF1) before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before…

LOW 34

Zend Framework 1 (ZF1) before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6, ZendOpenId, ZendRest, ZendService_AudioScrobbler, ZendService_Nirvanix, ZendService_SlideShare, ZendService_Technorati, and Zend…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02182 Published 2014-11-16 Fixed in 1.12.4, 2.0.2 +2 CWE-19

TI-2014-02155 CVE-2014-2681 · GHSA-43xg-87xw-jpv8

Zend Framework 1 (ZF1) before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before…

LOW 33

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.0259 Published 2014-11-16 Fixed in 1.12.4, 2.0.2 +2 CWE-19

TI-2014-02158 CVE-2014-2684 · GHSA-hwqj-6cj6-j4c3

The GenericConsumer class in the Consumer component in ZendOpenId before 2.0.2 and the…

LOW 32

The GenericConsumer class in the Consumer component in ZendOpenId before 2.0.2 and the Zend_OpenId_Consumer class in Zend Framework 1 before 1.12.4 does not verify that the openid_op_endpoint value identifies the same Id…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01599 Published 2014-11-16 No fix listed CWE-264

TI-2014-02157 CVE-2014-2683 · GHSA-5wm2-38q5-5rxv

Zend Framework 1 (ZF1) before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before…

LOW 27

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02353 Published 2014-11-16 Fixed in 1.12.4, 2.0.2 +2 CWE-17

Open these records in search →

Critical	15
High	8
Medium	25
Low	0
No CVSS	0