CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

PyPA•added 2026/07/09 4:49 p.m.•18 views

Improper Restriction of XML External Entity Reference in Plone

Plone before 5.2.3 allows XXE attacks via a feature that is protected by an unapplied permission of plone.schemaeditor.ManageSchemata therefore, only available to the Manager role...

8.8CVSS7.7AI score0.01453EPSS

SaveExploits0References7Affected Software1

PyPA•added 2026/07/09 4:49 p.m.•29 views

Improper Restriction of XML External Entity Reference in Plone

Plone before 5.2.3 allows XXE attacks via a feature that is protected by an unapplied permission of plone.schemaeditor.ManageSchemata therefore, only available to the Manager role...

8.8CVSS7.7AI score0.01453EPSS

SaveExploits0References7Affected Software1

Positive Technologies•added 2026/07/09 12:00 a.m.•4 views

PT-2026-59516

Plone before 5.2.3 allows XXE attacks via a feature that is protected by an unapplied permission of plone.schemaeditor.ManageSchemata therefore, only available to the Manager role...

8.8CVSS7.7AI score0.01453EPSS

SaveExploits0References8

OSV•added 2020/12/30 7:15 p.m.•21 views

CVE-2020-28736

Plone before 5.2.3 allows XXE attacks via a feature that is protected by an unapplied permission of plone.schemaeditor.ManageSchemata therefore, only available to the Manager role...

8.8CVSS7AI score

SaveExploits0References3

Prion•added 2020/12/30 7:15 p.m.•24 views

Design/Logic Flaw

Plone before 5.2.3 allows XXE attacks via a feature that is protected by an unapplied permission of plone.schemaeditor.ManageSchemata therefore, only available to the Manager role...

6.5CVSS8.5AI score0.01453EPSS

SaveExploits0References3Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by