{"schema_version":1,"title":"Zope2 (PyPI) vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 11 vulnerabilities in Zope2 (PyPI): 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2011-3587, was published on 6 July 2026.","url":"https://junglewise.ai/threats/technologies/zope2","json_url":"https://junglewise.ai/threats/technologies/zope2.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/zope2","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":1,"all_time":11,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":4},"latest":[{"cve":"CVE-2011-3587","epss":0.7808,"slug":"cve-2011-3587-zope-command-execution-vulnerability","title":"PYSEC-2026-1067 - Zope Command Execution Vulnerability","severity":"info","exploited":false,"published_at":"2026-07-06T08:03:27.453449+00:00","url":"https://junglewise.ai/threats/cve-2011-3587-zope-command-execution-vulnerability"},{"cve":"CVE-2009-5145","cvss":3,"epss":0.0207,"slug":"cve-2009-5145-zope-cross-site-scripting-xss-vulnerability-in-zmi-pages","title":"PYSEC-2026-763 - Zope Cross-site scripting (XSS) vulnerability in ZMI pages","severity":"low","exploited":false,"published_at":"2026-07-02T14:13:21.447849+00:00","url":"https://junglewise.ai/threats/cve-2009-5145-zope-cross-site-scripting-xss-vulnerability-in-zmi-pages"},{"cve":"CVE-2011-4924","cvss":3.1,"epss":0.0136,"slug":"cve-2011-4924-zope-xss-vulnerability","title":"PYSEC-2026-766 - Zope XSS Vulnerability","severity":"low","exploited":false,"published_at":"2026-07-02T14:13:17.937454+00:00","url":"https://junglewise.ai/threats/cve-2011-4924-zope-xss-vulnerability"},{"cve":"CVE-2010-1104","epss":0.0195,"slug":"cve-2010-1104-moderate-severity-vulnerability-that-affects-zope2","title":"PYSEC-2026-765 - Moderate severity vulnerability that affects Zope2","severity":"info","exploited":false,"published_at":"2026-07-02T14:13:08.911604+00:00","url":"https://junglewise.ai/threats/cve-2010-1104-moderate-severity-vulnerability-that-affects-zope2"},{"cve":"CVE-2011-2528","cvss":7.5,"epss":0.0203,"slug":"cve-2011-2528-plone-and-zope2-privilege-escalation-via-incorrect-security-fix","title":"Plone and Zope2 privilege escalation via incorrect security fix","severity":"high","exploited":false,"published_at":"2018-07-23T19:52:02+00:00","url":"https://junglewise.ai/threats/cve-2011-2528-plone-and-zope2-privilege-escalation-via-incorrect-security-fix"},{"cve":"CVE-2012-6661","cvss":3.1,"epss":0.0238,"slug":"cve-2012-6661-plone-and-zope2-do-not-reseed-pseudo-random-number-generator","title":"Plone and Zope2 do not reseed pseudo-random number generator","severity":"low","exploited":false,"published_at":"2014-11-03T22:55:00+00:00","url":"https://junglewise.ai/threats/cve-2012-6661-plone-and-zope2-do-not-reseed-pseudo-random-number-generator"},{"cve":"CVE-2012-5507","cvss":3.1,"epss":0.0144,"slug":"cve-2012-5507-plone-and-zope2-affected-by-race-condition","title":"Plone and Zope2 affected by Race Condition","severity":"low","exploited":false,"published_at":"2014-09-30T14:55:00+00:00","url":"https://junglewise.ai/threats/cve-2012-5507-plone-and-zope2-affected-by-race-condition"},{"cve":"CVE-2012-5489","cvss":3.1,"epss":0.0194,"slug":"cve-2012-5489-plone-and-zope2-vulnerable-to-unauthorized-access-to-restricted","title":"Plone and Zope2 vulnerable to unauthorized access to restricted attributes","severity":"low","exploited":false,"published_at":"2014-09-30T14:55:00+00:00","url":"https://junglewise.ai/threats/cve-2012-5489-plone-and-zope2-vulnerable-to-unauthorized-access-to-restricted"},{"cve":"CVE-2012-5486","cvss":3.1,"epss":0.0252,"slug":"cve-2012-5486-http-header-injection-in-plone-and-zope2","title":"HTTP header injection in Plone and Zope2","severity":"low","exploited":false,"published_at":"2014-09-30T14:55:00+00:00","url":"https://junglewise.ai/threats/cve-2012-5486-http-header-injection-in-plone-and-zope2"},{"cve":"CVE-2006-4684","epss":0.0241,"slug":"cve-2006-4684-zope-allows-remote-attackers-to-read-arbitrary-files","title":"Zope allows remote attackers to read arbitrary files","severity":"info","exploited":false,"published_at":"2006-09-19T18:07:00+00:00","url":"https://junglewise.ai/threats/cve-2006-4684-zope-allows-remote-attackers-to-read-arbitrary-files"},{"cve":"CVE-2006-3458","epss":0.0043,"slug":"cve-2006-3458-zope-allows-local-users-to-read-arbitrary-files","title":"Zope allows local users to read arbitrary files","severity":"info","exploited":false,"published_at":"2006-07-07T23:05:00+00:00","url":"https://junglewise.ai/threats/cve-2006-3458-zope-allows-local-users-to-read-arbitrary-files"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"tensorflow (PyPI)","slug":"pypi-tensorflow","vulnerabilities":435,"url":"https://junglewise.ai/threats/technologies/pypi-tensorflow"},{"name":"tensorflow-cpu (PyPI)","slug":"tensorflow-cpu","vulnerabilities":430,"url":"https://junglewise.ai/threats/technologies/tensorflow-cpu"},{"name":"tensorflow-gpu (PyPI)","slug":"tensorflow-gpu","vulnerabilities":427,"url":"https://junglewise.ai/threats/technologies/tensorflow-gpu"},{"name":"open-webui (PyPI)","slug":"open-webui","vulnerabilities":177,"url":"https://junglewise.ai/threats/technologies/open-webui"},{"name":"Django (PyPI)","slug":"django","vulnerabilities":173,"url":"https://junglewise.ai/threats/technologies/django"},{"name":"apache-airflow (PyPI)","slug":"apache-airflow","vulnerabilities":159,"url":"https://junglewise.ai/threats/technologies/apache-airflow"},{"name":"pillow (PyPI)","slug":"pillow","vulnerabilities":125,"url":"https://junglewise.ai/threats/technologies/pillow"},{"name":"praisonai (PyPI)","slug":"pypi-praisonai","vulnerabilities":120,"url":"https://junglewise.ai/threats/technologies/pypi-praisonai"},{"name":"vllm (PyPI)","slug":"pypi-vllm","vulnerabilities":117,"url":"https://junglewise.ai/threats/technologies/pypi-vllm"},{"name":"plone (PyPI)","slug":"pypi-plone","vulnerabilities":101,"url":"https://junglewise.ai/threats/technologies/pypi-plone"},{"name":"mlflow (PyPI)","slug":"mlflow","vulnerabilities":88,"url":"https://junglewise.ai/threats/technologies/mlflow"},{"name":"picklescan (PyPI)","slug":"picklescan","vulnerabilities":86,"url":"https://junglewise.ai/threats/technologies/picklescan"}],"technology":{"hub":true,"name":"Zope2 (PyPI)","slug":"zope2","vendor":{"hub":true,"name":"PyPI","slug":"pypi","url":"https://junglewise.ai/threats/vendors/pypi"},"aliases":[],"homepage":"https://zope.readthedocs.io/","repo_url":"https://github.com/zopefoundation/Zope","description":"A legacy Python web application server and object database framework.","url":"https://junglewise.ai/threats/technologies/zope2"},"most_severe":[{"cve":"CVE-2011-2528","cvss":7.5,"epss":0.0203,"slug":"cve-2011-2528-plone-and-zope2-privilege-escalation-via-incorrect-security-fix","title":"Plone and Zope2 privilege escalation via incorrect security fix","severity":"high","exploited":false,"published_at":"2018-07-23T19:52:02+00:00","url":"https://junglewise.ai/threats/cve-2011-2528-plone-and-zope2-privilege-escalation-via-incorrect-security-fix"},{"cve":"CVE-2012-5486","cvss":3.1,"epss":0.0252,"slug":"cve-2012-5486-http-header-injection-in-plone-and-zope2","title":"HTTP header injection in Plone and Zope2","severity":"low","exploited":false,"published_at":"2014-09-30T14:55:00+00:00","url":"https://junglewise.ai/threats/cve-2012-5486-http-header-injection-in-plone-and-zope2"},{"cve":"CVE-2012-6661","cvss":3.1,"epss":0.0238,"slug":"cve-2012-6661-plone-and-zope2-do-not-reseed-pseudo-random-number-generator","title":"Plone and Zope2 do not reseed pseudo-random number generator","severity":"low","exploited":false,"published_at":"2014-11-03T22:55:00+00:00","url":"https://junglewise.ai/threats/cve-2012-6661-plone-and-zope2-do-not-reseed-pseudo-random-number-generator"},{"cve":"CVE-2012-5489","cvss":3.1,"epss":0.0194,"slug":"cve-2012-5489-plone-and-zope2-vulnerable-to-unauthorized-access-to-restricted","title":"Plone and Zope2 vulnerable to unauthorized access to restricted attributes","severity":"low","exploited":false,"published_at":"2014-09-30T14:55:00+00:00","url":"https://junglewise.ai/threats/cve-2012-5489-plone-and-zope2-vulnerable-to-unauthorized-access-to-restricted"},{"cve":"CVE-2012-5507","cvss":3.1,"epss":0.0144,"slug":"cve-2012-5507-plone-and-zope2-affected-by-race-condition","title":"Plone and Zope2 affected by Race Condition","severity":"low","exploited":false,"published_at":"2014-09-30T14:55:00+00:00","url":"https://junglewise.ai/threats/cve-2012-5507-plone-and-zope2-affected-by-race-condition"},{"cve":"CVE-2011-4924","cvss":3.1,"epss":0.0136,"slug":"cve-2011-4924-zope-xss-vulnerability","title":"PYSEC-2026-766 - Zope XSS Vulnerability","severity":"low","exploited":false,"published_at":"2026-07-02T14:13:17.937454+00:00","url":"https://junglewise.ai/threats/cve-2011-4924-zope-xss-vulnerability"},{"cve":"CVE-2009-5145","cvss":3,"epss":0.0207,"slug":"cve-2009-5145-zope-cross-site-scripting-xss-vulnerability-in-zmi-pages","title":"PYSEC-2026-763 - Zope Cross-site scripting (XSS) vulnerability in ZMI pages","severity":"low","exploited":false,"published_at":"2026-07-02T14:13:21.447849+00:00","url":"https://junglewise.ai/threats/cve-2009-5145-zope-cross-site-scripting-xss-vulnerability-in-zmi-pages"},{"cve":"CVE-2011-3587","epss":0.7808,"slug":"cve-2011-3587-zope-command-execution-vulnerability","title":"PYSEC-2026-1067 - Zope Command Execution Vulnerability","severity":"info","exploited":false,"published_at":"2026-07-06T08:03:27.453449+00:00","url":"https://junglewise.ai/threats/cve-2011-3587-zope-command-execution-vulnerability"},{"cve":"CVE-2006-4684","epss":0.0241,"slug":"cve-2006-4684-zope-allows-remote-attackers-to-read-arbitrary-files","title":"Zope allows remote attackers to read arbitrary files","severity":"info","exploited":false,"published_at":"2006-09-19T18:07:00+00:00","url":"https://junglewise.ai/threats/cve-2006-4684-zope-allows-remote-attackers-to-read-arbitrary-files"},{"cve":"CVE-2010-1104","epss":0.0195,"slug":"cve-2010-1104-moderate-severity-vulnerability-that-affects-zope2","title":"PYSEC-2026-765 - Moderate severity vulnerability that affects Zope2","severity":"info","exploited":false,"published_at":"2026-07-02T14:13:08.911604+00:00","url":"https://junglewise.ai/threats/cve-2010-1104-moderate-severity-vulnerability-that-affects-zope2"}],"generated_at":"2026-11-13T03:07:00.155039+00:00"}