Known vulnerabilities in eZ publish

Vendor: eZ systems
Software: eZ publish
Software CPE: cpe:2.3:a:ez_systems:ez_publish:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting eZ publish eZ publish is affected by 3 known vulnerabilities: 3 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU47354 - Improper Control of Generation of Code ('Code Injection')
CWE-94 Medium
No
No
5.4.14.2 06.10.2020 SB2020100607
#VU43423 - Improper input validation
CVE-2012-1565
CWE-20 Medium
No
No
- 07.10.2012 SB2012100701
#VU43780 - Cross-Site Request Forgery (CSRF)
CVE-2012-4053
CWE-352 Medium
No
No
- 25.07.2012 SB2012072515