Skip to contentPimcore vulnerabilities
Newest
- pimcore customer-data-framework, pimcore/customer-data-framework, customer management framework +2 moreCross-site Scripting (XSS) - Stored in pimcore/customer-data-frameworkCVE-2023-4145Fix available6.5 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Reflected in pimcore/pimcoreCVE-2023-3822Fix available6.0 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcoreCVE-2023-3821Fix available6.1 Medium
- pimcore, pimcore pimcore/pimcore +1 moreSQL Injection in pimcore/pimcoreCVE-2023-3820Fix available7.2 High
- pimcore, pimcore pimcore/pimcore +1 moreExposure of Sensitive Information to an Unauthorized Actor in pimcore/pimcoreCVE-2023-3819Fix available7.6 High
- pimcore, pimcore pimcore/pimcore +1 moreSQL Injection in pimcore/pimcoreCVE-2023-3673Fix available7.2 High
- pimcore admin classic bundle, admin-ui-classic-bundle +1 morePimcore admin UI vulnerable to Cross-site Scripting in two factor authentication setup pageCVE-2023-37280Fix available5.0 Medium
- pimcore customer-data-framework, pimcore/customer-data-framework, customer management framework +2 moreImproper Authorization in pimcore/customer-data-frameworkCVE-2023-3574Fix available6.3 Medium
- pimcore, pimcore pimcore/pimcore +1 morePath Traversal: '\..\filename' in pimcore/pimcoreCVE-2023-2984Fix available6.3 Medium
- pimcore, pimcore pimcore/pimcore +1 morePrivilege Defined With Unsafe Actions in pimcore/pimcoreCVE-2023-2983Fix available6.5 Medium
- pimcore pimcore/customer-data-framework, customer management framework +1 moreStoring Passwords in a Recoverable Format in pimcore/customer-data-frameworkCVE-2023-2881Fix available6.7 Medium
- pimcore pimcore/customer-data-framework, customer management framework +1 moreSQL Injection in pimcore/customer-data-frameworkCVE-2023-2756Fix available6.5 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcoreCVE-2023-2730Fix available6.3 Medium
- pimcore customer management framework, customer-data-framework +1 morePimcore vulnerable to Business Logic Errors in Customer automation rulesCVE-2023-32075Fix available4.3 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcoreCVE-2023-2630Fix available5.7 Medium
- pimcore pimcore/customer-data-framework, customer management framework +1 moreImproper Neutralization of Formula Elements in a CSV File in pimcore/customer-data-frameworkCVE-2023-2629Fix available5.0 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Generic in pimcore/pimcoreCVE-2023-2616Fix available6.8 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Reflected in pimcore/pimcoreCVE-2023-2615Fix available6.8 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - DOM in pimcore/pimcoreCVE-2023-2614Fix available6.8 Medium
- pimcorePimcore Path Traversal Vulnerability in AdminBundle/Controller/Reports/CustomReportController.phpCVE-2023-30855Fix available6.5 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcoreCVE-2023-2361Fix available6.3 Medium
- pimcore, pimcore pimcore/pimcore +1 moreStored Cross-site Scripting (XSS) in pimcore/pimcoreCVE-2023-2332Fix available4.0 Medium
- pimcorePimcore Arbitrary File Read in Admin JS CSS filesCVE-2023-30852Fix available4.4 Medium
- pimcorePimcore SQL Injection Vulnerability in Admin Translations APICVE-2023-30850Fix available8.8 High
- pimcorePimcore vulnerable to SQL Injection in Translation Export APICVE-2023-30849Fix available8.8 High
- pimcorePimcore SQL Injection Vulnerability in Admin Search Find APICVE-2023-30848Fix available8.8 High
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - DOM in pimcore/pimcoreCVE-2023-2343Fix available5.2 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Reflected in pimcore/pimcoreCVE-2023-2342Fix available4.0 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Generic in pimcore/pimcoreCVE-2023-2341Fix available7.3 High
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcoreCVE-2023-2340Fix available6.1 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Reflected in pimcore/pimcoreCVE-2023-2339Fix available6.1 Medium
- pimcore, pimcore pimcore/pimcore +1 moreSQL Injection in pimcore/pimcoreCVE-2023-2338Fix available7.2 High
- pimcore, pimcore pimcore/pimcore +1 morePath Traversal in pimcore/pimcoreCVE-2023-2336Fix available5.5 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Generic in pimcore/pimcoreCVE-2023-2328Fix available5.2 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcoreCVE-2023-2327Fix available4.0 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcoreCVE-2023-2323Fix available6.8 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcoreCVE-2023-2322Fix available5.2 Medium
- pimcore perspective editor, perspective-editor +1 morePimcore Perspective Editor vulnerable to Cross-site Scripting in perspective nameCVE-2023-28850Fix available6.1 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcoreCVE-2023-1704Fix available5.1 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Generic in pimcore/pimcoreCVE-2023-1703Fix available5.3 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Generic in pimcore/pimcoreCVE-2023-1702Fix available4.0 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Reflected in pimcore/pimcoreCVE-2023-1701Fix available4.0 Medium
- pimcorePimcore vulnerable to improper quoting of filters in Custom ReportsCVE-2023-28438Fix available6.2 Medium
- pimcore, pimcore pimcore/pimcore +1 moreSQL Injection in pimcore/pimcoreCVE-2023-1578Fix availableEPSS 62.8%6.7 Medium
- pimcorePimcore has Cross-site Scripting vulnerability in DataObject tooltip fieldCVE-2023-28429Fix available6.1 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - DOM in pimcore/pimcoreCVE-2023-1517Fix available4.0 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcoreCVE-2023-1515Fix available5.2 Medium
- pimcorePimcore has improper quoting of columns when calling methods "getByUuid" & "exists" on UUID ModelCVE-2023-28108Fix available7.9 High
- pimcorePimcore vulnerable to Cross-site Scripting in UrlSlug Data typeCVE-2023-28106Fix available6.1 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Reflected in pimcore/pimcoreCVE-2023-1429Fix available4.0 Medium
- Show moreLoading…