CVE-2010-3198: zope
Vulnerability summary
CVE-2010-3198 is a medium (CVSS 4.3) vulnerability in zope. EPSS estimates a 1.54% chance of exploitation in the next 30 days, higher than 74.9% of scored vulnerabilities. 1 public exploit is recorded.
Public exploit (reference, Date unknown)
Source freshness unavailable
How is this decided?Timeline
- 08-09-2010PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads) via vectors that trigger uncaught exceptions.
CVSS metrics
3 scores · 2 sources · 3 versionsEPSS trend
Probability
1.54%
Chance of exploitation in the next 30 days
Percentile
75%
Versus all other CVEs
30-day change
No change 0.00 pp
From 1.54% on 04-10-2026
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
1 foundExploit Reference (bugs.launchpad.net)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
PyPI1 product
- zope≥ 2.10.0, < 2.10.12 | ≥ 2.11.0, < 2.11.7
Zope1 product
- zope2.10.0-b1 | 2.10.0-b2 | 2.10.0-c1 | 2.10.0-final | 2.10.2 | 2.10.2-b1 | 2.10.2-final | 2.10.3 | 2.10.3-final | 2.10.4-final | 2.10.5 | 2.10.6 | 2.10.7 | 2.10.8 | 2.10.9 | 2.10.10 | 2.10.11 | 2.11.0 | 2.11.0a1 | 2.11.0b1 | 2.11.0c1 | 2.11.1 | 2.11.2 | 2.11.3 | 2.11.4 | 2.11.5 | 2.11.6
2 vendors · 2 products
References
14 links- mail.zope.org/pipermail/zope-announce/2010-September/002247.htmlMailing ListX Refsource MLISTPatchVendor AdvisoryWEBFIXAdvisory
- bugs.launchpad.net/zope2/+bug/627988X Refsource CONFIRMExploitPatchVendor AdvisoryWEBEVIDENCEFIXAdvisory