[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fRz7xSt6YUEYzaIFkPCMQBWALbaNYzBVS3W3hh-s0EdU":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":70,"kevVulnerabilities":132,"topProductsByCves":133,"seoMetadata":144,"meta":153},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":69},36870,"zope",11,51,0,511,"2024-09-30","z",[16,21,27,33,37,43,49,53,57,61,65],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":20},176012,304,36,"2023-10-04",{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},176011,"zodb",27,4,"2010-10-19",{"id":28,"product_name":29,"version_count":30,"cve_count":31,"kev_count":11,"last_cve_update":32},176004,"accesscontrol",49,3,"2023-09-06",{"id":34,"product_name":35,"version_count":36,"cve_count":31,"kev_count":11,"last_cve_update":13},176009,"restrictedpython",19,{"id":38,"product_name":39,"version_count":40,"cve_count":41,"kev_count":11,"last_cve_update":42},176008,"products.pluggableauthservice",39,2,"2021-03-08",{"id":44,"product_name":45,"version_count":46,"cve_count":47,"kev_count":11,"last_cve_update":48},176010,"sqlalchemyda",18,1,"2024-02-07",{"id":50,"product_name":51,"version_count":11,"cve_count":47,"kev_count":11,"last_cve_update":52},176006,"products.cmfcore","2023-07-03",{"id":54,"product_name":55,"version_count":10,"cve_count":47,"kev_count":11,"last_cve_update":56},176007,"products.genericsetup","2021-03-09",{"id":58,"product_name":59,"version_count":11,"cve_count":47,"kev_count":11,"last_cve_update":60},176005,"grok","2021-07-01",{"id":62,"product_name":63,"version_count":47,"cve_count":47,"kev_count":11,"last_cve_update":64},176013,"zope_management_interface","2017-09-25",{"id":66,"product_name":67,"version_count":31,"cve_count":11,"kev_count":11,"last_cve_update":68},176014,"zserver",null,"Zope is a technology vendor with 11 tracked products and 51 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[71,80,87,92,99,105,110,115,121,127],{"cveId":72,"description":73,"publishedDate":74,"cvssScore":75,"cvssVersion":76,"severity":77,"isKev":78,"epssScore":79},"CVE-2011-3587","Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p_ class in OFS\u002Fmisc_.py and the use of Python modules.","2011-10-10",9.3,"v2","Critical",false,0.78079,{"cveId":81,"description":82,"publishedDate":42,"cvssScore":83,"cvssVersion":84,"severity":85,"isKev":78,"epssScore":86},"CVE-2021-21337","Products.PluggableAuthService is a pluggable Zope authentication and authorization framework. In Products.PluggableAuthService before version 2.6.0 there is an open redirect vulnerability. A maliciously crafted link to the login form and login functionality could redirect the browser to a different website. The problem has been fixed in version 2.6.1. Depending on how you have installed Products.PluggableAuthService, you should change the buildout version pin to `2.6.1` and re-run the buildout, or if you used `pip` simply do `pip install \"Products.PluggableAuthService>=2.6.1\".",6.1,"v3.1","Medium",0.08443,{"cveId":88,"description":89,"publishedDate":90,"cvssScore":25,"cvssVersion":76,"severity":85,"isKev":78,"epssScore":91},"CVE-2008-5102","PythonScripts in Zope 2 2.11.2 and earlier, as used in Conga and other products, allows remote authenticated users to cause a denial of service (resource consumption or application halt) via certain (1) raise or (2) import statements.","2008-11-17",0.03924,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":96,"cvssVersion":76,"severity":97,"isKev":78,"epssScore":98},"CVE-2005-3323","docutils in Zope 2.6, 2.7 before 2.7.8, and 2.8 before 2.8.2 allows remote attackers to include arbitrary files via include directives in RestructuredText functionality.","2005-10-27",7.5,"High",0.03046,{"cveId":100,"description":101,"publishedDate":64,"cvssScore":102,"cvssVersion":103,"severity":97,"isKev":78,"epssScore":104},"CVE-2015-7293","Multiple cross-site request forgery (CSRF) vulnerabilities in Zope Management Interface 4.3.7 and earlier, and Plone before 5.x.",8.8,"v3.0",0.03042,{"cveId":106,"description":107,"publishedDate":108,"cvssScore":96,"cvssVersion":76,"severity":97,"isKev":78,"epssScore":109},"CVE-2000-0483","The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization.","2000-06-15",0.02968,{"cveId":111,"description":112,"publishedDate":113,"cvssScore":96,"cvssVersion":76,"severity":97,"isKev":78,"epssScore":114},"CVE-2009-0669","Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network protocol.","2009-08-07",0.0286,{"cveId":116,"description":117,"publishedDate":118,"cvssScore":119,"cvssVersion":76,"severity":85,"isKev":78,"epssScore":120},"CVE-2012-5486","ZPublisher.HTTPRequest._scrubHeader in Zope 2 before 2.13.19, as used in Plone before 4.3 beta 1, allows remote attackers to inject arbitrary HTTP headers via a linefeed (LF) character.","2014-09-30",6.4,0.02521,{"cveId":122,"description":123,"publishedDate":124,"cvssScore":125,"cvssVersion":76,"severity":85,"isKev":78,"epssScore":126},"CVE-2006-4684","The docutils module in Zope (Zope2) 2.7.0 through 2.7.9 and 2.8.0 through 2.8.8 does not properly handle web pages with reStructuredText (reST) markup, which allows remote attackers to read arbitrary files via a csv_table directive, a different vulnerability than CVE-2006-3458.","2006-09-19",5,0.02405,{"cveId":128,"description":129,"publishedDate":130,"cvssScore":125,"cvssVersion":76,"severity":85,"isKev":78,"epssScore":131},"CVE-2012-6661","Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, does not reseed the pseudo-random number generator (PRNG), which makes it easier for remote attackers to guess the value via unspecified vectors.  NOTE: this issue was SPLIT from CVE-2012-5508 due to different vulnerability types (ADT2).","2014-11-03",0.0238,[],[134,135,136,137,138,139,140,141,142,143],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":20},{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},{"id":28,"product_name":29,"version_count":30,"cve_count":31,"kev_count":11,"last_cve_update":32},{"id":34,"product_name":35,"version_count":36,"cve_count":31,"kev_count":11,"last_cve_update":13},{"id":38,"product_name":39,"version_count":40,"cve_count":41,"kev_count":11,"last_cve_update":42},{"id":44,"product_name":45,"version_count":46,"cve_count":47,"kev_count":11,"last_cve_update":48},{"id":50,"product_name":51,"version_count":11,"cve_count":47,"kev_count":11,"last_cve_update":52},{"id":54,"product_name":55,"version_count":10,"cve_count":47,"kev_count":11,"last_cve_update":56},{"id":58,"product_name":59,"version_count":11,"cve_count":47,"kev_count":11,"last_cve_update":60},{"id":62,"product_name":63,"version_count":47,"cve_count":47,"kev_count":11,"last_cve_update":64},{"title":145,"metaDescription":146,"keywords":147,"structuredData":148},"Zope - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Zope covering 11 products with 51 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Zope vulnerabilities, Zope security, Zope CVE, Zope threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":149,"@type":150,"name":151,"description":146,"url":152},"https:\u002F\u002Fschema.org","Organization","Zope","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fzope",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":154,"apiVersion":155},"2026-10-17T19:32:21.811Z","3.0"]