zopefoundation

Records56All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high25CVSS 7.0–8.9

Exploited now

zopefoundation records in CISA KEV

No zopefoundation vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Accesscontrol · all components

TI-2021-12476 CVE-2021-32811 · GHSA-g4gq-j4p2-j8fr

LOW 37

Zope is an open-source web application server.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.02296 Published 2021-08-02 Fixed in 4.6.3, 5.3 CWE-915

TI-2021-12472 CVE-2021-32807 · GHSA-qcx9-j53g-ccgf

LOW 36

The module `AccessControl` defines security policies for Python code used in restricted code within Zope applications.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02107 Published 2021-07-30 Fixed in 4.3, 5.2 CWE-915

TI-2023-21676 CVE-2023-41050 · GHSA-8xv7-89vj-q48c

LOW 35

AccessControl provides a general security framework for use in Zope.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00641 Published 2023-09-06 Fixed in 4.4, 4.8.9 +3 CWE-200