Vulnerabilities > Zope > Zope > 2.2.5

DATE CVE VULNERABILITY TITLE RISK
2008-11-17 CVE-2008-5102 Resource Management Errors vulnerability in Zope
PythonScripts in Zope 2 2.11.2 and earlier, as used in Conga and other products, allows remote authenticated users to cause a denial of service (resource consumption or application halt) via certain (1) raise or (2) import statements.
network
low complexity
zope CWE-399
4.0
2002-04-22 CVE-2002-0170 Unspecified vulnerability in Zope
Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration.
network
low complexity
zope
7.5
2001-10-10 CVE-2001-1227 Unspecified vulnerability in Zope
Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.
network
low complexity
zope
7.5