Known vulnerabilities in ezpublish-legacy

Vendor: eZ systems
Software CPE: cpe:2.3:a:ez_systems:ezpublish-legacy:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ezpublish-legacy ezpublish-legacy is affected by 2 known vulnerabilities: 1 high, 1 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU56353 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 High
No
No
5.4.14, 2017.12.7.4, 2019.03.6.1 06.09.2021 SB2021090617
#VU47354 - Improper Control of Generation of Code ('Code Injection')
CWE-94 Medium
No
No
2017.12.7.3, 2019.03.5.1 06.10.2020 SB2020100607