Plone vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2013-4197Highplone: Plone Improper Access Control Vulnerability CVE-2013-4193Highplone: Plone Unrestricted Filed Manipulation vulnerability via content edit forms CVE-2013-7060Mediumplone: Plone Filesystem path information leak CVE-2013-7061MediumPlone: Plone Privilege escalation through exposed underlying API CVE-2012-5491Mediumplone: Plone Information Disclosure CVE-2012-5492Mediumplone: Plone Metadata Disclosure CVE-2012-5487Mediumplone: Plone Sandbox Bypass CVE-2012-5502Mediumplone: Plone Cross-site scripting Vulnerability CVE-2012-5490Mediumplone: Plone Cross-site scripting Vulnerability CVE-2012-5494Mediumplone: Plone Cross-site scripting Vulnerability CVE-2012-5504Mediumplone: Plone Cross-site scripting Vulnerability CVE-2012-5493Mediumplone: Plone Sandbox Bypass CVE-2012-5501Highplone: Plone Arbitrary File Read CVE-2012-5505Highplone: Plone Information Disclosure CVE-2012-5496Highplone: Plone DoS via Crafted URL CVE-2012-5506Highplone: Plone denial of service via RSS Feed Request CVE-2012-5495Criticalplone: Plone python code injection CVE-2012-5488HighPlone: Plone Code Injection vulnerability CVE-2012-5485HighPlone: Plone Code Injection vulnerability CVE-2012-5497Mediumplone: Plone User account enumeration via crafted URL CVE-2012-5499HighPlone: Plone is vulnerable to denial of service CVE-2012-5500Mediumplone: Plone contains Cross-site Request Forgery CVE-2012-5508MediumPlone: Exposure of Sensitive Information in Plone CVE-2012-5498Highplone: Plone denial of service via Caching Bypass CVE-2016-7147Mediumplone: Plone XSS in Zope ZMI

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo