zkoss records
2 published records for vendor zkoss.
Researcher profile
- Entered KEV
- 1 · 50%
- Weaponized
- 1 · 50%
- Pre-auth RCE
- 0
- With a fix record
- 50%
- Median publish → KEV
- 185 days
Attack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
89Now | CVE-2022-36537Weaponized | ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafted POST request sent zkoss · zk framework | High7.5 | KEV | 95.3% | Aug 26, 2022 |
17Monitor | CVE-2013-5966No exploit | Cross-site scripting (XSS) vulnerability in ZK Framework before 5.0.13 allows remote attackers to inject arbitrary web script or HTML via unzkoss · zk framework · CWE-79 | Medium4.3 | — | 1.1% | Nov 20, 2013 |
- CVE-2022-3653789Now
ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafted POST request sent
HighCVSS 7.5KEVWeaponizedEPSS 95%zkoss · zk frameworkAug 26, 2022
- CVE-2013-596617Monitor
Cross-site scripting (XSS) vulnerability in ZK Framework before 5.0.13 allows remote attackers to inject arbitrary web script or HTML via un
MediumCVSS 4.3No exploitEPSS 1%zkoss · zk frameworkNov 20, 2013