Known vulnerabilities in Zend Framework

Vendor: Zend
Software CPE: cpe:2.3:a:zend:zend_framework:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 16
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Zend Framework Zend Framework is affected by 16 known vulnerabilities: 5 high, 9 medium, 2 low Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU30364 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2014-8089
CWE-89 High
No
No
2.3.3 17.02.2020 SB2020021724
SB2014121102
SB2014100708
and 4 more
#VU30424 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2015-3154
CWE-74 Medium
No
No
2.4.1 27.01.2020 SB2020012733
SB2015070722
SB2015050806
and 4 more
#VU30467 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-4451
CWE-79 Low
No
No
2.0.1 03.01.2020 SB2020010313
#VU30552 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-4913
CWE-79 Low
No
No
2.3.1 15.12.2019 SB2019121503
#VU30576 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2011-1939
CWE-89 High
Available
No
1.11.6 26.11.2019 SB2019112624
SB2014080402
#VU31374 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2014-4914
CWE-89 High
No
No
1.12.7 29.12.2017 SB2017122908
SB2014082104
SB2014071202
#VU38128 - Key Management Errors
CVE-2015-7503
CWE-320 Medium
No
No
- 10.10.2017 SB2015082510
SB2016061201
SB2016061202
and 1 more
#VU38578 - Improper input validation
CVE-2015-1555
CWE-20 High
No
No
- 07.08.2017 SB2017080771
#VU38880 - Cross-Site Request Forgery (CSRF)
CVE-2015-1786
CWE-352 High
No
No
- 09.06.2017 SB2017060912
#VU40663 - Improper input validation
CVE-2015-5161
CWE-20 Medium
Available
No
- 25.08.2015 SB2015082510
SB2015081207
SB2015081307
and 2 more
#VU41202 - Improper Authentication
CVE-2014-8088
CWE-287 Medium
No
No
- 22.10.2014 SB2014102208
SB2014121102
SB2014100708
and 4 more
#VU42855 - Exposure of sensitive information to an unauthorized actor
CVE-2012-5657
CWE-200 Medium
No
No
- 02.05.2013 SB2013021306
SB2013020401
SB2013010103
#VU43093 - Improper input validation
CVE-2012-3363
CWE-20 Medium
Available
No
- 13.02.2013 SB2013021306
SB2012062603
SB2012100408
and 1 more
#VU43094 - Improper input validation
CVE-2012-6531
CWE-20 Medium
No
No
- 13.02.2013 SB2013021306
#VU43095 - Resource Management Errors
CVE-2012-6532
CWE-399 Medium
No
No
- 13.02.2013 SB2013021306
#VU44659 - Exposure of sensitive information to an unauthorized actor
CVE-2011-3825
CWE-200 Medium
No
No
- 24.09.2011 SB2011092440
SB2011092441