Approved changes feed: RSS · Atom

cpe:2.3:a:plone:plone:2.5:*:*:*:*:*:*:*

part: a version: 2.5 update: *

VendorPlone (20065100-5fec-5b5e-bb46-a6d4673848e0)
ProductPlone (6110f612-67ec-5a9f-99a2-abd1946de8b4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/plone/plone purl2cpe 2026-06-01 10:16:04.150349

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-4199 vulnerable 2026-06-08 05:04:34.484227 Details available
(1) cb_decode.py and (2) linkintegrity.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote authenticated users to cause a denial of service (resource consumption) via a large zip archive, which is expanded (decompressed).
Published: 2014-03-11T15:00:00.000Z
Updated: 2024-08-06T16:38:01.526Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4198 vulnerable 2026-06-08 05:04:34.482515 Details available
mail_password.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to bypass the prohibition on password changes via the forgotten password email functionality.
Published: 2014-03-11T15:00:00.000Z
Updated: 2024-08-06T16:38:01.620Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4197 vulnerable 2026-06-08 05:04:34.480767 Details available
member_portrait.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to modify or delete portraits of other users via unspecified vectors.
Published: 2014-03-11T15:00:00.000Z
Updated: 2024-08-06T16:38:01.422Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4196 vulnerable 2026-06-08 05:04:34.479343 Details available
The object manager implementation (objectmanager.py) in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 does not properly restrict access to internal methods, which allows remote attackers to obtain sensitive information via a crafted request.
Published: 2014-03-11T15:00:00.000Z
Updated: 2024-08-06T16:38:02.174Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4195 vulnerable 2026-06-08 05:04:34.477910 Details available
Multiple open redirect vulnerabilities in (1) marmoset_patch.py, (2) publish.py, and (3) principiaredirect.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Published: 2014-03-11T15:00:00.000Z
Updated: 2024-08-06T16:38:01.645Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4194 vulnerable 2026-06-08 05:04:34.476656 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4193 vulnerable 2026-06-08 05:04:34.475194 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4192 vulnerable 2026-06-08 05:04:34.473784 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4191 vulnerable 2026-06-08 05:04:34.472495 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4190 vulnerable 2026-06-08 05:04:34.471127 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4189 vulnerable 2026-06-08 05:04:34.469355 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4188 vulnerable 2026-06-08 05:04:34.445614 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6661 vulnerable 2026-06-08 05:03:01.525759 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5508 vulnerable 2026-06-08 05:02:56.817884 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5507 vulnerable 2026-06-08 05:02:56.816102 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5506 vulnerable 2026-06-08 05:02:56.813705 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5505 vulnerable 2026-06-08 05:02:56.811883 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5504 vulnerable 2026-06-08 05:02:56.809436 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5503 vulnerable 2026-06-08 05:02:56.807669 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5502 vulnerable 2026-06-08 05:02:56.805876 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5501 vulnerable 2026-06-08 05:02:56.804102 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5500 vulnerable 2026-06-08 05:02:56.802448 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5499 vulnerable 2026-06-08 05:02:56.800663 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5498 vulnerable 2026-06-08 05:02:56.798845 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5497 vulnerable 2026-06-08 05:02:56.797035 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5496 vulnerable 2026-06-08 05:02:56.795624 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5495 vulnerable 2026-06-08 05:02:56.793930 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5494 vulnerable 2026-06-08 05:02:56.792156 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5493 vulnerable 2026-06-08 05:02:56.790425 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5492 vulnerable 2026-06-08 05:02:56.788639 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5491 vulnerable 2026-06-08 05:02:56.786758 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5490 vulnerable 2026-06-08 05:02:56.784960 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5489 vulnerable 2026-06-08 05:02:56.755921 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5488 vulnerable 2026-06-08 05:02:56.753869 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5487 vulnerable 2026-06-08 05:02:56.752007 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5486 vulnerable 2026-06-08 05:02:56.728430 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5485 vulnerable 2026-06-08 05:02:56.691942 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4462 vulnerable 2026-06-08 04:59:31.540597 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1949 vulnerable 2026-06-08 04:58:03.311014 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1948 vulnerable 2026-06-08 04:58:03.285830 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1340 vulnerable 2026-06-08 04:57:58.410391 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0720 vulnerable 2026-06-08 04:56:38.870495 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2422 vulnerable 2026-06-08 04:55:07.323763 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4571 vulnerable 2026-06-08 04:50:39.399229 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-5741 vulnerable 2026-06-08 04:50:06.911747 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4249 vulnerable 2026-06-08 04:49:11.378206 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4247 vulnerable 2026-06-08 04:49:11.375979 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.