Zframeworks maintains a focused product line centered on the ZZ framework, which despite its narrow scope occupies a prominent position in the vulnerability landscape and skews strongly toward critical-severity outcomes. The recurring exposure across injection variants, SQL injection, server-side request forgery, improper access control, and unrestricted file uploads reflects the web-application and input-handling demands of a widely embedded development framework. Defenders should prioritize this vendor's security updates and review downstream applications that depend on the framework; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Zframeworks over time
Signals from CVEs in this vendor scope (14 CVEs).
14 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-1834CRITICAL A vulnerability, which was classified as critical, was found in zj1983 zz up to 2024-8. This affects an unknown part of the file /resolve. The manipulation of the argument file lea | Mar 2, 2025 | 9.8 | 28 | NO | NO |
CVE-2025-1831CRITICAL A vulnerability classified as critical has been found in zj1983 zz up to 2024-8. Affected is the function GetDBUser of the file src/main/java/com/futvan/z/system/zorg/ZorgAction.ja | Mar 2, 2025 | 9.8 | 27 | NO | NO |
CVE-2025-1821CRITICAL A vulnerability was found in zj1983 zz up to 2024-8 and classified as critical. Affected by this issue is the function getUserOrgForUserId of the file src/main/java/com/futvan/z/sy | Mar 2, 2025 | 9.8 | 27 | NO | NO |
CVE-2025-1818CRITICAL A vulnerability, which was classified as critical, has been found in zj1983 zz up to 2024-8. This issue affects some unknown processing of the file src/main/java/com/futvan/z/syste | Mar 2, 2025 | 9.8 | 27 | NO | NO |
CVE-2025-1849HIGH A vulnerability classified as critical was found in zj1983 zz up to 2024-8. Affected by this vulnerability is an unknown functionality of the file /import_data_todb. The manipulati | Mar 3, 2025 | 8.8 | 26 | NO | NO |
CVE-2025-1832HIGH A vulnerability classified as critical was found in zj1983 zz up to 2024-8. Affected by this vulnerability is the function getUserList of the file src/main/java/com/futvan/z/system | Mar 2, 2025 | 8.8 | 26 | NO | NO |
CVE-2025-1848HIGH A vulnerability classified as critical has been found in zj1983 zz up to 2024-8. Affected is an unknown function of the file /import_data_check. The manipulation of the argument ur | Mar 3, 2025 | 8.8 | 25 | NO | NO |
CVE-2025-1847HIGH A vulnerability was found in zj1983 zz up to 2024-8. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to improper authorization. Th | Mar 3, 2025 | 8.8 | 25 | NO | NO |
CVE-2025-1833HIGH A vulnerability, which was classified as critical, has been found in zj1983 zz up to 2024-8. Affected by this issue is the function sendNotice of the file src/main/java/com/futvan/ | Mar 2, 2025 | 8.8 | 25 | NO | NO |
CVE-2025-1820HIGH A vulnerability has been found in zj1983 zz up to 2024-8 and classified as critical. Affected by this vulnerability is the function getOaWid of the file src/main/java/com/futvan/z/ | Mar 2, 2025 | 8.8 | 25 | NO | NO |
Signals from CVEs in this vendor scope (14 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Zframeworks.
Media articles that mention a CVE ID that affects a product developed by Zframeworks — matched by CVE ID, not by vendor name.