Filter

Versions

10.3.0
6
1.4.9
2
1.5.0
2
2.1.0
2
10.5.15
1
10.5.19
1
11.0.0
1
2.2.0
1
4.0.0
1
5.2.3
1
6.0.0
1
6.2.3
1
6.7.2
1

Pimcore PimcoreChange-Password via Portal-Profile sets PimcoreBackendUser password without hashing

high
8.7
First published (updated )
CVE-2024-49370

composer/pimcore/pimcorePimcore Vulnerable to Flooding Server with Thumbnail files

high
7.5
First published (updated )
CVE-2024-32871

Pimcore PimcorePimcore missing token/header to prevent CSRF

medium
6.5
First published (updated )
CVE-2023-49076

composer/pimcore/pimcoreSQL Injection in Admin Grid Filter API in Pimcore

high
8.8
First published (updated )
CVE-2023-47637

composer/pimcore/pimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
5.4
EPSS
0.09%
First published (updated )
CVE-2023-5873

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Pimcore PimcoreCross-site Scripting (XSS) - Reflected in pimcore/pimcore

medium
6.4
First published (updated )
CVE-2023-4453

composer/pimcore/pimcorePimcore Path Traversal Vulnerability in AssetController:importServerFilesAction

high
8.8
First published (updated )
CVE-2023-38708

Pimcore PimcoreCross-site Scripting (XSS) - Reflected in pimcore/pimcore

medium
6.1
First published (updated )
CVE-2023-3822

Pimcore PimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
6.1
First published (updated )
CVE-2023-3821

Pimcore PimcoreSQL Injection in pimcore/pimcore

high
7.2
EPSS
0.05%
First published (updated )
CVE-2023-3820

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Pimcore PimcoreExposure of Sensitive Information to an Unauthorized Actor in pimcore/pimcore

high
7.6
EPSS
0.07%
First published (updated )
CVE-2023-3819

Pimcore PimcoreSQL Injection in pimcore/pimcore

high
7.2
First published (updated )
CVE-2023-3673

Pimcore PimcorePath Traversal: '\..\filename' in pimcore/pimcore

high
8.8
First published (updated )
CVE-2023-2984

Pimcore PimcorePrivilege Defined With Unsafe Actions in pimcore/pimcore

high
8.8
First published (updated )
CVE-2023-2983

Pimcore PimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
6.3
First published (updated )
CVE-2023-2730

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Pimcore PimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
5.7
First published (updated )
CVE-2023-2630

Pimcore PimcoreCross-site Scripting (XSS) - DOM in pimcore/pimcore

medium
6.8
First published (updated )
CVE-2023-2614

Pimcore PimcoreCross-site Scripting (XSS) - Reflected in pimcore/pimcore

medium
6.8
First published (updated )
CVE-2023-2615

Pimcore PimcoreCross-site Scripting (XSS) - Generic in pimcore/pimcore

medium
6.8
First published (updated )
CVE-2023-2616

Pimcore PimcorePimcore Path Traversal Vulnerability in AdminBundle/Controller/Reports/CustomReportController.php

high
7.5
First published (updated )
CVE-2023-30855

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Pimcore PimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
6.3
First published (updated )
CVE-2023-2361

composer/pimcore/pimcoreStored Cross-site Scripting (XSS) in pimcore/pimcore

medium
4.8
First published (updated )
CVE-2023-2332

Pimcore PimcorePimcore Arbitrary File Read in Admin JS CSS files

medium
4.9
First published (updated )
CVE-2023-30852

Pimcore PimcorePimcore SQL Injection Vulnerability in Admin Translations API

high
8.8
First published (updated )
CVE-2023-30850

Pimcore PimcorePimcore vulnerable to SQL Injection in Translation Export API

high
8.8
First published (updated )
CVE-2023-30849

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Pimcore PimcorePimcore SQL Injection Vulnerability in Admin Search Find API

high
8.8
First published (updated )
CVE-2023-30848

composer/pimcore/pimcoreCross-site Scripting (XSS) - Generic in pimcore/pimcore

high
7.3
First published (updated )
CVE-2023-2341

composer/pimcore/pimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
6.1
First published (updated )
CVE-2023-2340

Pimcore PimcoreCross-site Scripting (XSS) - Reflected in pimcore/pimcore

medium
6.1
First published (updated )
CVE-2023-2339

composer/pimcore/pimcoreSQL Injection in pimcore/pimcore

high
8.8
First published (updated )
CVE-2023-2338

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

composer/pimcore/pimcoreCross-site Scripting (XSS) - Reflected in pimcore/pimcore

medium
5.4
First published (updated )
CVE-2023-2342

Pimcore PimcoreCross-site Scripting (XSS) - DOM in pimcore/pimcore

medium
5.4
First published (updated )
CVE-2023-2343

Pimcore PimcorePath Traversal in pimcore/pimcore

medium
6.5
First published (updated )
CVE-2023-2336

Pimcore PimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
6.8
First published (updated )
CVE-2023-2323

Pimcore PimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
5.4
First published (updated )
CVE-2023-2322

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Pimcore PimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
5.4
First published (updated )
CVE-2023-2327

Pimcore PimcoreCross-site Scripting (XSS) - Generic in pimcore/pimcore

medium
5.4
First published (updated )
CVE-2023-2328

Pimcore PimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
5.4
First published (updated )
CVE-2023-1704

Pimcore PimcoreCross-site Scripting (XSS) - Generic in pimcore/pimcore

medium
5.4
First published (updated )
CVE-2023-1702

Pimcore PimcoreCross-site Scripting (XSS) - Reflected in pimcore/pimcore

medium
5.4
First published (updated )
CVE-2023-1701

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Pimcore PimcoreCross-site Scripting (XSS) - Generic in pimcore/pimcore

medium
5.4
First published (updated )
CVE-2023-1703

Pimcore PimcorePimcore vulnerable to improper quoting of filters in Custom Reports

high
8
First published (updated )
CVE-2023-28438

Pimcore PimcoreSQL Injection in pimcore/pimcore

high
8.8
First published (updated )
CVE-2023-1578

Pimcore PimcorePimcore has Cross-site Scripting vulnerability in DataObject tooltip field

medium
6.1
First published (updated )
CVE-2023-28429

Pimcore PimcoreCross-site Scripting (XSS) - DOM in pimcore/pimcore

medium
4.8
First published (updated )
CVE-2023-1517

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Pimcore PimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
5.4
First published (updated )
CVE-2023-1515

Pimcore PimcoreSQL Injection, Input Validation

high
7.9
First published (updated )
CVE-2023-28108

Pimcore PimcoreXSS

medium
6.1
First published (updated )
CVE-2023-28106

Pimcore PimcoreCross-site Scripting (XSS) - Reflected in pimcore/pimcore

medium
5.4
First published (updated )
CVE-2023-1429

Pimcore PimcoreCross-site Scripting (XSS) - Reflected in pimcore/pimcore

medium
5.2
First published (updated )
CVE-2023-1312

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203