Approved changes feed: RSS · Atom

cpe:2.3:a:zope:zope:2.13.9:*:*:*:*:*:*:*

part: a version: 2.13.9 update: *

VendorZope (400d8950-2847-5748-8fcd-7612c2170a9a)
ProductZope (0a3941f2-1c45-5687-af62-1666d59c833f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/zopefoundation/zope purl2cpe 2026-06-01 10:18:07.103419
pkg:pypi/zope purl2cpe 2026-06-01 10:18:07.103421
pkg:sourceforge/zope purl2cpe 2026-06-01 10:18:07.103422

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-5489 vulnerable 2026-06-08 05:02:56.783920 Details available
The App.Undo.UndoSupport.get_request_var_or_attr function in Zope before 2.12.21 and 3.13.x before 2.13.11, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote authenticated users to gain access to restricted attributes via unspecified vectors.
Published: 2014-09-30T14:00:00.000Z
Updated: 2024-08-06T21:05:47.309Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3587 vulnerable 2026-06-08 04:59:26.509816 Details available
Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p_ class in OFS/misc_.py and the use of Python modules.
Published: 2011-10-10T10:00:00.000Z
Updated: 2024-08-06T23:37:48.380Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.