Vendor coverage

zkoss vulnerabilities

Track published CVEs, severity trends, and remediation context for zkoss products.

RSS

Total vulnerabilities

Critical issues

Average CVSS score

5.9

Search results

Filtered vulnerability results

Showing 1-2 of 2 vulnerabilities.

Sort current page

CVE-2022-36537HighCVSS7.5Published Aug 26, 2022

ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafted POST request sent to the component AuUploader.

Affected vendor

zkoss

Affected product

zk framework

Coverage

4 affected product entries

CVSS

7.5

HIGH

Published

Aug 26, 2022

CVE-2013-5966UnknownCVSS4.3Published Nov 20, 2013

Cross-site scripting (XSS) vulnerability in ZK Framework before 5.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.