- How many CVEs does Plone have?
- Plone has 124 published CVE records since 2006, including 8 in the last two years.
- How many Plone CVEs are in CISA KEV?
- None of Plone's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
- Which Plone products have the most CVEs?
- The Plone products with the most published CVEs are plone, Products.CMFPlone, Plone CMS, @plone/volto, volto.
- What are the most common weakness types in Plone CVEs?
- Plone's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-264, CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-20 (Improper Input Validation).
- Are there public exploits for Plone vulnerabilities?
- Yes — 23 of Plone's CVEs have a known public exploit.
- How many critical Plone vulnerabilities are there?
- Plone has 13 critical and 46 high-severity CVEs.
- What is the average severity of Plone CVEs?
- The average CVSS base score across Plone's scored CVEs is 7.0.