[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fyJt_xHxHn-x4oS6dxCN0Y-Ep6YQqN987InWHk_9Pgrc":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":73,"kevVulnerabilities":131,"topProductsByCves":132,"seoMetadata":143,"meta":152},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":72},25050,"plone",12,115,0,305,"2024-03-06","p",[16,20,26,32,38,43,47,51,56,60,64,68],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},129627,146,105,{"id":21,"product_name":22,"version_count":23,"cve_count":24,"kev_count":11,"last_cve_update":25},129628,"plone_cms",6,5,"2008-03-20",{"id":27,"product_name":28,"version_count":29,"cve_count":30,"kev_count":11,"last_cve_update":31},129629,"plone_docker_official_image",37,2,"2024-02-05",{"id":33,"product_name":34,"version_count":35,"cve_count":36,"kev_count":11,"last_cve_update":37},129634,"volto",20,1,"2022-03-14",{"id":39,"product_name":40,"version_count":41,"cve_count":36,"kev_count":11,"last_cve_update":42},129625,"isurlinportal",4,"2021-08-02",{"id":44,"product_name":45,"version_count":36,"cve_count":36,"kev_count":11,"last_cve_update":46},129626,"namedfile","2023-09-21",{"id":48,"product_name":49,"version_count":50,"cve_count":36,"kev_count":11,"last_cve_update":46},129633,"rest",3,{"id":52,"product_name":53,"version_count":54,"cve_count":36,"kev_count":11,"last_cve_update":55},129623,"cmfeditions",10,"2011-10-10",{"id":57,"product_name":58,"version_count":11,"cve_count":36,"kev_count":11,"last_cve_update":59},129630,"plone_hotfix_20110720","2011-07-19",{"id":61,"product_name":62,"version_count":23,"cve_count":36,"kev_count":11,"last_cve_update":63},129632,"plonepas","2009-04-23",{"id":65,"product_name":66,"version_count":36,"cve_count":11,"kev_count":11,"last_cve_update":67},129624,"collective.contact.widget",null,{"id":69,"product_name":70,"version_count":71,"cve_count":11,"kev_count":11,"last_cve_update":67},129631,"plone.namedfile",71,"Plone is a technology vendor with 12 tracked products and 115 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[74,82,88,93,100,107,111,116,120,126],{"cveId":75,"description":76,"publishedDate":55,"cvssScore":77,"cvssVersion":78,"severity":79,"isKev":80,"epssScore":81},"CVE-2011-3587","Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p_ class in OFS\u002Fmisc_.py and the use of Python modules.",9.3,"v2","Critical",false,0.78079,{"cveId":83,"description":84,"publishedDate":85,"cvssScore":24,"cvssVersion":78,"severity":86,"isKev":80,"epssScore":87},"CVE-2006-1711","Plone 2.0.5, 2.1.2, and 2.5-beta1 does not restrict access to the (1) changeMemberPortrait, (2) deletePersonalPortrait, and (3) testCurrentPassword methods, which allows remote attackers to modify portraits.","2006-04-11","Medium",0.04016,{"cveId":89,"description":90,"publishedDate":91,"cvssScore":24,"cvssVersion":78,"severity":86,"isKev":80,"epssScore":92},"CVE-2011-4462","Plone 4.1.3 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.","2011-12-30",0.0322,{"cveId":94,"description":95,"publishedDate":96,"cvssScore":97,"cvssVersion":78,"severity":98,"isKev":80,"epssScore":99},"CVE-2011-0720","Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain administrative access, read or create arbitrary content, and change the site skin via unknown vectors.","2011-02-03",7.5,"High",0.03198,{"cveId":101,"description":102,"publishedDate":103,"cvssScore":104,"cvssVersion":105,"severity":98,"isKev":80,"epssScore":106},"CVE-2015-7293","Multiple cross-site request forgery (CSRF) vulnerabilities in Zope Management Interface 4.3.7 and earlier, and Plone before 5.x.","2017-09-25",8.8,"v3.0",0.03042,{"cveId":108,"description":109,"publishedDate":25,"cvssScore":54,"cvssVersion":78,"severity":79,"isKev":80,"epssScore":110},"CVE-2008-1393","Plone CMS 3.0.5, and probably other 3.x versions, places a base64 encoded form of the username and password in the __ac cookie for the admin account, which makes it easier for remote attackers to obtain administrative privileges by sniffing the network.",0.02904,{"cveId":112,"description":113,"publishedDate":114,"cvssScore":24,"cvssVersion":78,"severity":86,"isKev":80,"epssScore":115},"CVE-2012-5498","queryCatalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to bypass caching and cause a denial of service via a crafted request to a collection.","2014-09-30",0.02666,{"cveId":117,"description":118,"publishedDate":114,"cvssScore":24,"cvssVersion":78,"severity":86,"isKev":80,"epssScore":119},"CVE-2012-5488","python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via a crafted URL, related to createObject.",0.0261,{"cveId":121,"description":122,"publishedDate":123,"cvssScore":124,"cvssVersion":105,"severity":86,"isKev":80,"epssScore":125},"CVE-2016-7135","Directory traversal vulnerability in Plone CMS 5.x through 5.0.6 and 4.2.x through 4.3.11 allows remote administrators to read arbitrary files via a .. (dot dot) in the path parameter in a getFile action to Plone\u002F++theme++barceloneta\u002F@@plone.resourceeditor.filemanager-actions.","2017-03-07",4.9,0.02604,{"cveId":127,"description":128,"publishedDate":114,"cvssScore":129,"cvssVersion":78,"severity":86,"isKev":80,"epssScore":130},"CVE-2012-5486","ZPublisher.HTTPRequest._scrubHeader in Zope 2 before 2.13.19, as used in Plone before 4.3 beta 1, allows remote attackers to inject arbitrary HTTP headers via a linefeed (LF) character.",6.4,0.02521,[],[133,134,135,136,137,138,139,140,141,142],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},{"id":21,"product_name":22,"version_count":23,"cve_count":24,"kev_count":11,"last_cve_update":25},{"id":27,"product_name":28,"version_count":29,"cve_count":30,"kev_count":11,"last_cve_update":31},{"id":33,"product_name":34,"version_count":35,"cve_count":36,"kev_count":11,"last_cve_update":37},{"id":39,"product_name":40,"version_count":41,"cve_count":36,"kev_count":11,"last_cve_update":42},{"id":44,"product_name":45,"version_count":36,"cve_count":36,"kev_count":11,"last_cve_update":46},{"id":48,"product_name":49,"version_count":50,"cve_count":36,"kev_count":11,"last_cve_update":46},{"id":52,"product_name":53,"version_count":54,"cve_count":36,"kev_count":11,"last_cve_update":55},{"id":57,"product_name":58,"version_count":11,"cve_count":36,"kev_count":11,"last_cve_update":59},{"id":61,"product_name":62,"version_count":23,"cve_count":36,"kev_count":11,"last_cve_update":63},{"title":144,"metaDescription":145,"keywords":146,"structuredData":147},"Plone - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Plone covering 12 products with 115 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Plone vulnerabilities, Plone security, Plone CVE, Plone threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":148,"@type":149,"name":150,"description":145,"url":151},"https:\u002F\u002Fschema.org","Organization","Plone","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fplone",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":153,"apiVersion":154},"2026-10-17T19:39:51.611Z","3.0"]