Skip to contentPimcore vulnerabilities
Newest
- pimcore customer data framework, customer management framework +1 morePimcore Customer Data Framework 'SegmentAssignmentController.php' Blind SQL InjectionCVE-2021-318676.5 Medium
- pimcore, pimcore pimcore/pimcore +1 moreSQL InjectionCVE-2021-23405Fix available8.3 High
- pimcore, pimcore pimcore/pimcore +1 moreLocal File InclusionCVE-2021-23340Fix available7.1 High
- pimcoreAuthorization bypass in PimcoreCVE-2020-262467.7 High
- pimcore, pimcore pimcore/pimcore +1 moreSQL InjectionCVE-2020-7759Fix available6.5 Medium
- pimcore, pimcore pimcore/pimcore +1 moreData leakage via SQL Injection in PimcoreCVE-2019-10763Fix available6.5 Medium
- pimcorePimcore Access Control IssuesCVE-2019-18981Fix available9.8 Critical
- pimcorePimcore Cross-site Scripting (XSS) vulnerabilityCVE-2019-18982Fix available6.1 Medium
- pimcorePimcore 2FA Vulnerable to Brute ForcingCVE-2019-18985Fix available9.8 Critical
- pimcorePimcore Discloses Usernames In UseCVE-2019-18986Fix available7.5 High
- pimcorePimcore XSS VulnerabilityCVE-2019-18656Fix available6.1 Medium
- pimcorePimcore RCE via PHAR uploadCVE-2019-16317Fix available8.8 High
- pimcorePimcore Unrestricted Upload of File with Dangerous TypeCVE-2019-16318Fix available8.8 High
- pimcorePimcore Unserialize Remote Code ExecutionCVE-2019-10867Public exploitFix availableEPSS 71.0%8.8 High
- pimcorePimcore XSS VulnerabilityCVE-2018-14059Public exploitFix available5.4 Medium
- pimcorePimcore SQLi VulnerabilityCVE-2018-14058Public exploitFix availableEPSS 28.6%6.5 Medium
- pimcorePimcore CSRF VulnerabilityCVE-2018-14057Public exploitFix available8.8 High
- pimcoreSQL injection vulnerability in pimcore before build 3473 allows remote attackers to execute...CVE-2015-44267.5 High
- pimcoreDirectory traversal vulnerability in pimcore before build 3473 allows remote authenticated users...CVE-2015-4425Public exploit4.9 Medium
- pimcoreThe getObjectByToken function in Newsletter.php in the Pimcore_Tool_Newsletter module in pimcore...CVE-2014-2922Public exploit6.4 Medium
- pimcorePimcore Vulnerable to PHP Object Injection AttacksCVE-2014-2921Public exploitFix available7.5 High