Zkoss

Records2All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Zkoss records in CISA KEV

TI-2022-16855 ZK Framework AuUploader Unspecified Vulnerability CRITICAL 90KEV 2023-02-27

Components

Products in the NVD configurations · select one to filter the records

Zk Framework 2 records CRITICAL

Records

2 records in Zk Framework · all components

TI-2022-16855 CVE-2022-36537 · GHSA-6278-2q4m-cmf3

ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access…

CRITICAL 90KEV

ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafted POST request sent to the component AuUploader.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.95397 Published 2022-08-26 Fixed in 8.6.4.2, 9.0.1.3 +3 CWE-200

TI-2013-05086 CVE-2013-5966 · GHSA-r2q8-mr6h-xmhh

Cross-site scripting (XSS) vulnerability in ZK Framework before 5.0.13 allows remote…

LOW 22

Cross-site scripting (XSS) vulnerability in ZK Framework before 5.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01162 Published 2013-11-19 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0