CVE-2014-2682
10 advisories.
Packagist/zendframework/zendframework1 CVE-2014-2682: medium, EPSS 2.18%
Several Zend Products Vulnerable to XXE and XEE attacks
Action: Upgrade zendframework/zendframework1 to 1.12.4 or later.
composer require zendframework/zendframework1:1.12.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.12.4 | - |
Fixed versions
| 1.12.4 |
Sources
- osv: GHSA-gp39-h9c2-qw79
- https://nvd.nist.gov/vuln/detail/CVE-2014-2682
- https://web.archive.org/web/20140419041226/http://www.securityfocus.com/bid/66358
- https://web.archive.org/web/20150523055201/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2014:072/?name=MDVSA-2014:072
- http://advisories.mageia.org/MGASA-2014-0151.html
- http://framework.zend.com/security/advisory/ZF2014-01
- http://seclists.org/oss-sec/2014/q2/0
- http://www.debian.org/security/2015/dsa-3265
CVE-2014-2682 · published · modified · JSON
Packagist/zendframework/zendopenid CVE-2014-2682: medium, EPSS 2.18%
Several Zend Products Vulnerable to XXE and XEE attacks
Action: Upgrade zendframework/zendopenid to 2.0.2 or later.
composer require zendframework/zendopenid:2.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.2 | - |
Fixed versions
| 2.0.2 |
Sources
- osv: GHSA-gp39-h9c2-qw79#Packagist/zendframework/zendopenid
- https://nvd.nist.gov/vuln/detail/CVE-2014-2682
- https://web.archive.org/web/20140419041226/http://www.securityfocus.com/bid/66358
- https://web.archive.org/web/20150523055201/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2014:072/?name=MDVSA-2014:072
- http://advisories.mageia.org/MGASA-2014-0151.html
- http://framework.zend.com/security/advisory/ZF2014-01
- http://seclists.org/oss-sec/2014/q2/0
- http://www.debian.org/security/2015/dsa-3265
CVE-2014-2682 · published · modified · JSON
Packagist/zendframework/zendrest CVE-2014-2682: medium, EPSS 2.18%
Several Zend Products Vulnerable to XXE and XEE attacks
Action: Upgrade zendframework/zendrest to 2.0.2 or later.
composer require zendframework/zendrest:2.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.2 | - |
Fixed versions
| 2.0.2 |
Sources
- osv: GHSA-gp39-h9c2-qw79#Packagist/zendframework/zendrest
- https://nvd.nist.gov/vuln/detail/CVE-2014-2682
- https://web.archive.org/web/20140419041226/http://www.securityfocus.com/bid/66358
- https://web.archive.org/web/20150523055201/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2014:072/?name=MDVSA-2014:072
- http://advisories.mageia.org/MGASA-2014-0151.html
- http://framework.zend.com/security/advisory/ZF2014-01
- http://seclists.org/oss-sec/2014/q2/0
- http://www.debian.org/security/2015/dsa-3265
CVE-2014-2682 · published · modified · JSON
Packagist/zendframework/zendservice-audioscrobbler CVE-2014-2682: medium, EPSS 2.18%
Several Zend Products Vulnerable to XXE and XEE attacks
Action: Upgrade zendframework/zendservice-audioscrobbler to 2.0.2 or later.
composer require zendframework/zendservice-audioscrobbler:2.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.2 | - |
Fixed versions
| 2.0.2 |
Sources
- osv: GHSA-gp39-h9c2-qw79#Packagist/zendframework/zendservice-audioscrobbler
- https://nvd.nist.gov/vuln/detail/CVE-2014-2682
- https://web.archive.org/web/20140419041226/http://www.securityfocus.com/bid/66358
- https://web.archive.org/web/20150523055201/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2014:072/?name=MDVSA-2014:072
- http://advisories.mageia.org/MGASA-2014-0151.html
- http://framework.zend.com/security/advisory/ZF2014-01
- http://seclists.org/oss-sec/2014/q2/0
- http://www.debian.org/security/2015/dsa-3265
CVE-2014-2682 · published · modified · JSON
Packagist/zendframework/zendservice-nirvanix CVE-2014-2682: medium, EPSS 2.18%
Several Zend Products Vulnerable to XXE and XEE attacks
Action: Upgrade zendframework/zendservice-nirvanix to 2.0.2 or later.
composer require zendframework/zendservice-nirvanix:2.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.2 | - |
Fixed versions
| 2.0.2 |
Sources
- osv: GHSA-gp39-h9c2-qw79#Packagist/zendframework/zendservice-nirvanix
- https://nvd.nist.gov/vuln/detail/CVE-2014-2682
- https://web.archive.org/web/20140419041226/http://www.securityfocus.com/bid/66358
- https://web.archive.org/web/20150523055201/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2014:072/?name=MDVSA-2014:072
- http://advisories.mageia.org/MGASA-2014-0151.html
- http://framework.zend.com/security/advisory/ZF2014-01
- http://seclists.org/oss-sec/2014/q2/0
- http://www.debian.org/security/2015/dsa-3265
CVE-2014-2682 · published · modified · JSON
Packagist/zendframework/zendservice-slideshare CVE-2014-2682: medium, EPSS 2.18%
Several Zend Products Vulnerable to XXE and XEE attacks
Action: Upgrade zendframework/zendservice-slideshare to 2.0.2 or later.
composer require zendframework/zendservice-slideshare:2.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.2 | - |
Fixed versions
| 2.0.2 |
Sources
- osv: GHSA-gp39-h9c2-qw79#Packagist/zendframework/zendservice-slideshare
- https://nvd.nist.gov/vuln/detail/CVE-2014-2682
- https://web.archive.org/web/20140419041226/http://www.securityfocus.com/bid/66358
- https://web.archive.org/web/20150523055201/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2014:072/?name=MDVSA-2014:072
- http://advisories.mageia.org/MGASA-2014-0151.html
- http://framework.zend.com/security/advisory/ZF2014-01
- http://seclists.org/oss-sec/2014/q2/0
- http://www.debian.org/security/2015/dsa-3265
CVE-2014-2682 · published · modified · JSON
Packagist/zendframework/zendservice-technorati CVE-2014-2682: medium, EPSS 2.18%
Several Zend Products Vulnerable to XXE and XEE attacks
Action: Upgrade zendframework/zendservice-technorati to 2.0.2 or later.
composer require zendframework/zendservice-technorati:2.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.2 | - |
Fixed versions
| 2.0.2 |
Sources
- osv: GHSA-gp39-h9c2-qw79#Packagist/zendframework/zendservice-technorati
- https://nvd.nist.gov/vuln/detail/CVE-2014-2682
- https://web.archive.org/web/20140419041226/http://www.securityfocus.com/bid/66358
- https://web.archive.org/web/20150523055201/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2014:072/?name=MDVSA-2014:072
- http://advisories.mageia.org/MGASA-2014-0151.html
- http://framework.zend.com/security/advisory/ZF2014-01
- http://seclists.org/oss-sec/2014/q2/0
- http://www.debian.org/security/2015/dsa-3265
CVE-2014-2682 · published · modified · JSON
Packagist/zendframework/zendservice-windowsazure CVE-2014-2682: medium, EPSS 2.18%
Several Zend Products Vulnerable to XXE and XEE attacks
Action: Upgrade zendframework/zendservice-windowsazure to 2.0.2 or later.
composer require zendframework/zendservice-windowsazure:2.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.2 | - |
Fixed versions
| 2.0.2 |
Sources
- osv: GHSA-gp39-h9c2-qw79#Packagist/zendframework/zendservice-windowsazure
- https://nvd.nist.gov/vuln/detail/CVE-2014-2682
- https://web.archive.org/web/20140419041226/http://www.securityfocus.com/bid/66358
- https://web.archive.org/web/20150523055201/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2014:072/?name=MDVSA-2014:072
- http://advisories.mageia.org/MGASA-2014-0151.html
- http://framework.zend.com/security/advisory/ZF2014-01
- http://seclists.org/oss-sec/2014/q2/0
- http://www.debian.org/security/2015/dsa-3265
CVE-2014-2682 · published · modified · JSON
Packagist/zendframework/zendservice-amazon CVE-2014-2682: medium, EPSS 2.18%
Several Zend Products Vulnerable to XXE and XEE attacks
Action: Upgrade zendframework/zendservice-amazon to 2.0.3 or later.
composer require zendframework/zendservice-amazon:2.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.3 | - |
Fixed versions
| 2.0.3 |
Sources
- osv: GHSA-gp39-h9c2-qw79#Packagist/zendframework/zendservice-amazon
- https://nvd.nist.gov/vuln/detail/CVE-2014-2682
- https://web.archive.org/web/20140419041226/http://www.securityfocus.com/bid/66358
- https://web.archive.org/web/20150523055201/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2014:072/?name=MDVSA-2014:072
- http://advisories.mageia.org/MGASA-2014-0151.html
- http://framework.zend.com/security/advisory/ZF2014-01
- http://seclists.org/oss-sec/2014/q2/0
- http://www.debian.org/security/2015/dsa-3265
CVE-2014-2682 · published · modified · JSON
Packagist/zendframework/zendservice-api CVE-2014-2682: medium, EPSS 2.18%
Several Zend Products Vulnerable to XXE and XEE attacks
Action: Upgrade zendframework/zendservice-api to 1.0.0 or later.
composer require zendframework/zendservice-api:1.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.0 | - |
Fixed versions
| 1.0.0 |
Sources
- osv: GHSA-gp39-h9c2-qw79#Packagist/zendframework/zendservice-api
- https://nvd.nist.gov/vuln/detail/CVE-2014-2682
- https://web.archive.org/web/20140419041226/http://www.securityfocus.com/bid/66358
- https://web.archive.org/web/20150523055201/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2014:072/?name=MDVSA-2014:072
- http://advisories.mageia.org/MGASA-2014-0151.html
- http://framework.zend.com/security/advisory/ZF2014-01
- http://seclists.org/oss-sec/2014/q2/0
- http://www.debian.org/security/2015/dsa-3265
CVE-2014-2682 · published · modified · JSON