Aimeos vulnerabilities

Products

• Ai-admin-graphql 3
• Ai-client-html 2
• Ai-controller-frontend 2
• Aimeos-core 2
• Frontend Controller 2

Newest

• aimeos pagible Aimeos Pagible CMS vulnerable to Server Side Request Forgery (SSRF) via DNS rebinding in admin proxy CVE-2026-49262 Fix available 3.0 LowJune 26, 2026
• aimeos laravel ecommerce platform Aimeos Laravel ecommerce platform 2021.10 LTS - 'sort' SQL injection CVE-2021-47763 8.8 HighJanuary 15, 2026
• aimeos grapesjs cms, ai-cms-grapesjs +1 more Aimeos GrapesJS CMS extension possible stores XSS exploitable by authenticated editors CVE-2025-66468 Fix available 7.7 HighDecember 2, 2025
• aimeos ai-admin-graphql Aimeos GraphQL API admin interface denial of service vulnerability in SaaS and marketplace setups CVE-2024-47173 Fix available 5.5 MediumOctober 24, 2024
• aimeos ai-controller-frontend, frontend controller +1 more aimeos/ai-controller-frontend has IDOR vulnerability in account profile page CVE-2024-39319 Fix available 5.3 MediumSeptember 26, 2024
• aimeos ai-controller-frontend, frontend controller +1 more aimeos/ai-controller-frontend doesn't reset payment status in basket CVE-2024-39325 Fix available 5.3 MediumJuly 2, 2024
• aimeos ai-admin-jsonadm, aimeos project ai-controller-frontend +1 more aimeos/ai-admin-jsonadm improper access control vulnerability allows editors to remove required records CVE-2024-39322 Fix available 5.5 MediumJuly 2, 2024
• aimeos ai-admin-graphql aimeos/ai-admin-graphql improper access control vulnerability allows editors to manage own services CVE-2024-39324 Fix available 3.8 LowJuly 2, 2024
• aimeos ai-admin-graphql aimeos/ai-admin-graphql improper access control vulnerability allows an editor to modify admin account CVE-2024-39323 Fix available 7.1 HighJuly 2, 2024
• aimeos ai-client-html Aimeos HTML client may potentially reveal sensitive information in error log CVE-2024-38516 Fix available 8.8 HighJune 25, 2024
• aimeos ai-client-html Aimeos HTML client vulnerable to digital products download without proper payment status check CVE-2024-37296 Fix available 5.3 MediumJune 5, 2024
• aimeos aimeos-core Aimeos Core remote code execution in web server context CVE-2024-37295 Fix available 7.2 HighJune 5, 2024
• aimeos aimeos-core Aimeos denial of service vulnerability in SaaS and marketplace setups CVE-2024-37294 Fix available 5.5 MediumMay 29, 2024