Zend Server CE
by Zend
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2018-10230 | Med | 0.40 | 6.1 | 0.03 | Apr 19, 2018 | Zend Debugger in Zend Server before 9.1.3 has XSS, aka ZSR-2455. | ||
| CVE-2012-5382 | 0.03 | — | 0.01 | Oct 11, 2012 | Untrusted search path vulnerability in the installation functionality in Zend Server 5.6.0 SP4, when installed in the top-level C:\ directory, might allow local users to gain privileges via a Trojan horse DLL in the C:\Zend\ZendServer\share\ZendFramework\bin directory, which may… | |||
| CVE-2011-3825 | 0.00 | — | 0.01 | Sep 24, 2011 | Zend Framework 1.11.3 in Zend Server CE 5.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Validate.php and certain other files. |
- risk 0.40cvss 6.1epss 0.03
Zend Debugger in Zend Server before 9.1.3 has XSS, aka ZSR-2455.
- CVE-2012-5382Oct 11, 2012risk 0.03cvss —epss 0.01
Untrusted search path vulnerability in the installation functionality in Zend Server 5.6.0 SP4, when installed in the top-level C:\ directory, might allow local users to gain privileges via a Trojan horse DLL in the C:\Zend\ZendServer\share\ZendFramework\bin directory, which may…
- CVE-2011-3825Sep 24, 2011risk 0.00cvss —epss 0.01
Zend Framework 1.11.3 in Zend Server CE 5.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Validate.php and certain other files.