P
Vendor security profile
plone
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs7
Critical4
CISA KEV0
Public exploit2
Patch rate%0
Avg. CVSS7.8
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
2
3
0
CVE KEV
CVE severity distribution
7toplam CVE
Critical4 (57%)
Medium3 (43%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%29
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
7Unknown
Latest vulnerabilities
6.5
9.9
CVE-2026-57149plone.app.portlets Vulnerable to Remote Code Execution via TALES Injection
Patch status unknownEPSS %1
4.3
CVE-2026-54503plone.app.textfield: Stored XSS by spoofing mime type
Patch status unknownEPSS %0
9.1
CVE-2026-55247plone.app.event: Denial of service via iCalendar import
Patch status unknownEPSS %0
9.1
CVE-2026-55248plone.app.portlets: Denial of service via RSS feed portlet
Patch status unknownEPSS %0
9.8
CVE-2024-23054Vulnerability in Plone Docker Official Image
Patch status unknown Public Exploits:1EPSS %1
6.1
CVE-2024-23055Vulnerability in Plone Docker Official Image
Patch status unknown Public Exploits:2EPSS %1