Patchfirst
Patchfirst
ChainPackagist:zendframework/zendframework1

zendframework/zendframework1: incomplete fixes (2012–2015)

8 CVEs over 3 generations, 13 Feb 2013 to 25 Aug 2015.

Family tree

Left to right by publication date.Oldest first. Select a CVE to open it.
  1. CVE-2012-336313 Feb 2013 First in the chain
  2. CVE-2012-653113 Feb 2013 related to CVE-2012-3363
  3. CVE-2012-653213 Feb 2013 related to CVE-2012-3363
  4. CVE-2012-56572 May 2013 next fix after CVE-2012-6531
  5. CVE-2014-268116 Nov 2014 incomplete fix for CVE-2012-5657
  6. CVE-2014-268216 Nov 2014 incomplete fix for CVE-2012-5657
  7. CVE-2014-268316 Nov 2014 incomplete fix for CVE-2012-6532next fix after CVE-2012-5657
  8. CVE-2015-516125 Aug 2015 related to CVE-2012-3363related to CVE-2012-6531and 2 more
Feb 2013AprJulOct 2014Jan 2015Jul CVE-2012-3363 → CVE-2012-6531: related (high confidence)CVE-2012-3363 → CVE-2012-6532: related (high confidence)CVE-2012-6532 → CVE-2014-2683: incomplete fix (high confidence)CVE-2012-5657 → CVE-2014-2681: incomplete fix (high confidence)CVE-2012-5657 → CVE-2014-2682: incomplete fix (high confidence)CVE-2012-3363 → CVE-2015-5161: related (medium confidence)CVE-2012-6531 → CVE-2015-5161: related (medium confidence)CVE-2012-6532 → CVE-2015-5161: related (medium confidence)CVE-2012-5657 → CVE-2015-5161: related (medium confidence)CVE-2012-6531 → CVE-2012-5657: Next fix in the same package (low confidence)CVE-2012-5657 → CVE-2014-2683: Next fix in the same package (low confidence) CVE-2012-3363 13 Feb 2013 CVE-2012-6531 13 Feb 2013 CVE-2012-6532 13 Feb 2013 CVE-2012-5657 2 May 2013 CVE-2014-2681 16 Nov 2014 CVE-2014-2682 16 Nov 2014 CVE-2014-2683 16 Nov 2014 CVE-2015-5161 25 Aug 2015 Feb 2013AprJulJan 2014OctJan 2015AprJul CVE-2012-3363 → CVE-2012-6531: related (high confidence)CVE-2012-3363 → CVE-2012-6532: related (high confidence)CVE-2012-6532 → CVE-2014-2683: incomplete fix (high confidence)CVE-2012-5657 → CVE-2014-2681: incomplete fix (high confidence)CVE-2012-5657 → CVE-2014-2682: incomplete fix (high confidence)CVE-2012-3363 → CVE-2015-5161: related (medium confidence)CVE-2012-6531 → CVE-2015-5161: related (medium confidence)CVE-2012-6532 → CVE-2015-5161: related (medium confidence)CVE-2012-5657 → CVE-2015-5161: related (medium confidence)CVE-2012-6531 → CVE-2012-5657: Next fix in the same package (low confidence)CVE-2012-5657 → CVE-2014-2683: Next fix in the same package (low confidence) CVE-2012-3363 13 Feb 2013 CVE-2012-6531 13 Feb 2013 CVE-2012-6532 13 Feb 2013 CVE-2012-5657 2 May 2013 CVE-2014-2681 16 Nov 2014 CVE-2014-2682 16 Nov 2014 CVE-2014-2683 16 Nov 2014 CVE-2015-5161 25 Aug 2015
Exploited in the wild (CISA KEV) Not in KEV Priority score (0 to 100) High confidence Medium Low

CVEs in this family

Table view of the tree
CVEPublishedTitleLinked fromPriority
CVE-2012-3363 13 Feb 2013 Zend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement… · fixed in 1.12.0 First in chain 31.1
CVE-2012-6531 13 Feb 2013 (1) Zend_Dom, (2) Zend_Feed, and (3) Zend_Soap in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 do not… · fixed in 1.12.0 CVE-2012-3363 · related · High 17.0
CVE-2012-6532 13 Feb 2013 (1) Zend_Dom, (2) Zend_Feed, (3) Zend_Soap, and (4) Zend_XmlRpc in Zend Framework 1.x before 1.11.13 and 1.12.x before… · fixed in 1.12.0 CVE-2012-3363 · related · High 15.8
CVE-2012-5657 2 May 2013 The (1) Zend_Feed_Rss and (2) Zend_Feed_Atom classes in Zend_Feed in Zend Framework 1.11.x before 1.11.15 and 1.12.x… · fixed in 1.12.1 CVE-2012-6531 · Next fix in the same package · Low 15.5
CVE-2014-2681 16 Nov 2014 Zend Framework 1 (ZF1) before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6, ZendOpenId, ZendRest… · fixed in 1.12.4 CVE-2012-5657 · incomplete fix · High 17.1
CVE-2014-2682 16 Nov 2014 Zend Framework 1 (ZF1) before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6, ZendOpenId, ZendRest… · fixed in 1.12.4 CVE-2012-5657 · incomplete fix · High 16.5
CVE-2014-2683 16 Nov 2014 Zend Framework 1 (ZF1) before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6, ZendOpenId, ZendRest… · fixed in 1.12.4 CVE-2012-6532 · incomplete fix · High 16.7
CVE-2015-5161 25 Aug 2015 The Zend_Xml_Security::scan in ZendXml before 1.0.1 and Zend Framework before 1.12.14, 2.x before 2.4.6, and 2.5.x… · fixed in 2.5.2 CVE-2012-3363 · related · Medium 24.1
↑ ↓ chooseEnter openEsc close