CVE-2015-0270: Zend Framework

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Zend Framework before 2.2.10 and 2.3.x before 2.3.5 has Potential SQL injection in PostgreSQL Zend\Db adapter.

Affected products

• Zend Framework: before 2.2.10 (fixed in 2.2.10); from 2.3.0, before 2.3.5 (fixed in 2.3.5)

Published 2019-10-25. Last modified 2026-06-17.