| Max CVSS | 7.5 | Min CVSS | 5.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2002-0170 | 7.5 |
Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration.
|
18-10-2016 - 02:16 | 22-04-2002 - 04:00 | |
| CVE-2002-0688 | 7.5 |
ZCatalog plug-in index support capability for Zope 2.4.0 through 2.5.1 allows anonymous users and untrusted code to bypass access restrictions and call arbitrary methods of catalog indexes.
|
05-09-2008 - 20:28 | 23-07-2002 - 04:00 | |
| CVE-2002-0687 | 5.0 |
The "through the web code" capability for Zope 2.0 through 2.5.1 b1 allows untrusted users to shut down the Zope server via certain headers.
|
05-09-2008 - 20:28 | 23-07-2002 - 04:00 |