pimcore
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 161 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 21, 2014 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Pimcore through 2026.3.1 Stored XSS via ExternalImage Field Version Preview
Pimcore pimcore admin-ui-classic-bundle - SQL Injection
Pimcore: Account Takeover via Password Reset URL Injection allows unauthenticated attacker to hijack any admin account with 2FA bypass
Pimcore: SQL Injection via Column Name in DateFilter allows authenticated user to extract arbitrary database data including admin password hashes
Pimcore: Insufficient Permission Check on Class Definition Creation Endpoint Allows Privilege Escalation
Pimcore CMS 12.3.8 Twig Sandbox Bypass via SecurityPolicy checkMethodAllowed
Pimcore Platform v12.3.3 - Stored XSS in Document Editable Embed rendering
Pimcore vulnerable to SQL injection via unsanitized filter value in Dependency Dao RLIKE clause
Pimcore Web2Print Tools Bundle "Favourite Output Channel Configuration" Missing Function Level Authorization
Pimcore is Missing Function Level Authorization on "Static Routes" Listing
Monitor pimcore in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.