zframeworks records

14 published records for vendor zframeworks.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

14 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
21Monitor	CVE-2025-1818No exploit	zj1983 zz ZfileAction.upload unrestricted uploadzframeworks · zz · CWE-284 File upload Broken access control (IDOR)	Medium5.3	—	0.7%	Mar 2, 2025
21Monitor	CVE-2025-1846No exploit	zj1983 zz File ZfileAction.java deleteLocalFile denial of servicezframeworks · zz · CWE-404	Medium5.3	—	0.6%	Mar 2, 2025
21Monitor	CVE-2025-1812No exploit	zj1983 zz SuperZ.java GetUserOrg sql injectionzframeworks · zz · CWE-74 SQL injection	Medium5.3	—	0.6%	Mar 2, 2025
21Monitor	CVE-2025-1831No exploit	zj1983 zz ZorgAction.java GetDBUser sql injectionzframeworks · zz · CWE-74 SQL injection	Medium5.3	—	0.6%	Mar 2, 2025
21Monitor	CVE-2025-1821No exploit	zj1983 zz ZorgAction.java getUserOrgForUserId sql injectionzframeworks · zz · CWE-74 SQL injection	Medium5.3	—	0.6%	Mar 2, 2025
21Monitor	CVE-2025-1834No exploit	zj1983 zz resolve unrestricted uploadzframeworks · zz · CWE-284 File upload Broken access control (IDOR)	Medium5.3	—	0.6%	Mar 2, 2025
21Monitor	CVE-2025-1832No exploit	zj1983 zz ZroleAction.java getUserList sql injectionzframeworks · zz · CWE-74 SQL injection	Medium5.3	—	0.5%	Mar 2, 2025
21Monitor	CVE-2025-1820No exploit	zj1983 zz ZworkflowAction.java getOaWid sql injectionzframeworks · zz · CWE-74 SQL injection	Medium5.3	—	0.5%	Mar 2, 2025
21Monitor	CVE-2025-1833No exploit	zj1983 zz HTTP Request Customer_noticeAction.java sendNotice server-side request forgeryzframeworks · zz · CWE-918 SSRF	Medium5.3	—	0.5%	Mar 2, 2025
21Monitor	CVE-2025-1847No exploit	zj1983 zz improper authorizationzframeworks · zz · CWE-266	Medium5.3	—	0.5%	Mar 2, 2025
21Monitor	CVE-2025-1848No exploit	zj1983 zz import_data_check server-side request forgeryzframeworks · zz · CWE-918 SSRF	Medium5.3	—	0.5%	Mar 3, 2025
21Monitor	CVE-2025-1849No exploit	zj1983 zz import_data_todb server-side request forgeryzframeworks · zz · CWE-918 SSRF	Medium5.3	—	0.5%	Mar 3, 2025
21Monitor	CVE-2025-1813No exploit	zj1983 zz cross-site request forgeryzframeworks · zz · CWE-352 Pre-auth CSRF	Medium5.3	—	0.4%	Mar 2, 2025
19Monitor	CVE-2025-1830No exploit	zj1983 zz Customer Information cross site scriptingzframeworks · zz · CWE-79 XSS	Medium4.8	—	0.4%	Mar 2, 2025

CVE-2025-1818
21Monitor
zj1983 zz ZfileAction.upload unrestricted upload
MediumCVSS 5.3No exploitEPSS 1%
- File upload
- Broken access control (IDOR)
zframeworks · zzMar 2, 2025
CVE-2025-1846
21Monitor
zj1983 zz File ZfileAction.java deleteLocalFile denial of service
MediumCVSS 5.3No exploitEPSS 1%
zframeworks · zzMar 2, 2025
CVE-2025-1812
21Monitor
zj1983 zz SuperZ.java GetUserOrg sql injection
MediumCVSS 5.3No exploitEPSS 1%
- SQL injection
zframeworks · zzMar 2, 2025
CVE-2025-1831
21Monitor
zj1983 zz ZorgAction.java GetDBUser sql injection
MediumCVSS 5.3No exploitEPSS 1%
- SQL injection
zframeworks · zzMar 2, 2025
CVE-2025-1821
21Monitor
zj1983 zz ZorgAction.java getUserOrgForUserId sql injection
MediumCVSS 5.3No exploitEPSS 1%
- SQL injection
zframeworks · zzMar 2, 2025
CVE-2025-1834
21Monitor
zj1983 zz resolve unrestricted upload
MediumCVSS 5.3No exploitEPSS 1%
- File upload
- Broken access control (IDOR)
zframeworks · zzMar 2, 2025
CVE-2025-1832
21Monitor
zj1983 zz ZroleAction.java getUserList sql injection
MediumCVSS 5.3No exploitEPSS 1%
- SQL injection
zframeworks · zzMar 2, 2025
CVE-2025-1820
21Monitor
zj1983 zz ZworkflowAction.java getOaWid sql injection
MediumCVSS 5.3No exploitEPSS 1%
- SQL injection
zframeworks · zzMar 2, 2025
CVE-2025-1833
21Monitor
zj1983 zz HTTP Request Customer_noticeAction.java sendNotice server-side request forgery
MediumCVSS 5.3No exploitEPSS 1%
- SSRF
zframeworks · zzMar 2, 2025
CVE-2025-1847
21Monitor
zj1983 zz improper authorization
MediumCVSS 5.3No exploitEPSS 1%
zframeworks · zzMar 2, 2025
CVE-2025-1848
21Monitor
zj1983 zz import_data_check server-side request forgery
MediumCVSS 5.3No exploitEPSS 1%
- SSRF
zframeworks · zzMar 3, 2025
CVE-2025-1849
21Monitor
zj1983 zz import_data_todb server-side request forgery
MediumCVSS 5.3No exploitEPSS 1%
- SSRF
zframeworks · zzMar 3, 2025
CVE-2025-1813
21Monitor
zj1983 zz cross-site request forgery
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- CSRF
zframeworks · zzMar 2, 2025
CVE-2025-1830
19Monitor
zj1983 zz Customer Information cross site scripting
MediumCVSS 4.8No exploitEPSS 0%
- XSS
zframeworks · zzMar 2, 2025