Filter

Software

pimcore pimcore
117
pimcore admin classic bundle
9
pimcore customer management framework
7
pimcore adminbundle
1
pimcore core
1
pimcore customer data framework
1
pimcore customer-data-framework
1
pimcore data-hub
1
pimcore e-commerce framework
1
pimcore perspective editor
1

Pimcore PimcoreChange-Password via Portal-Profile sets PimcoreBackendUser password without hashing

high
8.7
First published (updated )
CVE-2024-49370

composer/pimcore/pimcorePimcore Vulnerable to Flooding Server with Thumbnail files

high
7.5
First published (updated )
CVE-2024-32871

composer/pimcore/admin-ui-classic-bundlePimcore Admin Classic Bundle permissions are not getting checked when working with tags

critical
9.1
EPSS
0.06%
First published (updated )
CVE-2024-24822

composer/pimcore/admin-ui-classic-bundlePimcore Admin Classic Bundle SQL Injection in Admin download files as zip

high
8.8
EPSS
0.06%
First published (updated )
CVE-2024-23646

composer/pimcore/admin-ui-classic-bundlePimcore Admin Classic Bundle host header injection in the password reset

high
8.8
EPSS
0.09%
First published (updated )
CVE-2024-23648

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

composer/pimcore/customer-management-framework-bundlepimcore/customer-data-framework is the Customer Management Framework for management of customer data…

medium
6.5
EPSS
0.05%
First published (updated )
CVE-2024-21667

composer/pimcore/customer-management-framework-bundleThe Customer Management Framework (CMF) for Pimcore adds functionality for customer data management,…

medium
6.5
EPSS
0.05%
First published (updated )
CVE-2024-21666

composer/pimcore/ecommerce-framework-bundleecommerce-framework-bundle is the Pimcore Ecommerce Framework Bundle. An authenticated and unauthori…

medium
4.3
EPSS
0.05%
First published (updated )
CVE-2024-21665

Pimcore PimcorePimcore missing token/header to prevent CSRF

medium
6.5
First published (updated )
CVE-2023-49076

composer/pimcore/admin-ui-classic-bundlePimcore Admin UI has Two Factor Authentication disabled for non admin security firewalls

high
8.4
First published (updated )
CVE-2023-49075

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

composer/pimcore/pimcoreSQL Injection in Admin Grid Filter API in Pimcore

high
8.8
First published (updated )
CVE-2023-47637

composer/pimcore/admin-ui-classic-bundleFull Path Disclosure via re-export document in pimcore/admin-ui-classic-bundle

medium
5.3
First published (updated )
CVE-2023-47636

composer/pimcore/admin-ui-classic-bundlePimcore Admin Classic Bundle Cross-site Scripting (XSS) in PDF previews

medium
6.1
First published (updated )
CVE-2023-46722

composer/pimcore/pimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
5.4
EPSS
0.09%
First published (updated )
CVE-2023-5873

composer/pimcore/admin-ui-classic-bundleUnverified Password Change in pimcore/admin-ui-classic-bundle

high
7.2
EPSS
0.05%
First published (updated )
CVE-2023-5844

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Pimcore CoreExcessive Data Query Operations in a Large Data Table in pimcore/demo

medium
6.5
First published (updated )
CVE-2023-5192

composer/pimcore/admin-ui-classic-bundleCross-site Scripting (XSS) in pimcore admin-ui-classic-bundle translations

medium
5.4
First published (updated )
CVE-2023-42817

Pimcore PimcoreCross-site Scripting (XSS) - Reflected in pimcore/pimcore

medium
6.4
First published (updated )
CVE-2023-4453

composer/pimcore/pimcorePimcore Path Traversal Vulnerability in AssetController:importServerFilesAction

high
8.8
First published (updated )
CVE-2023-38708

composer/pimcore/customer-management-framework-bundleCross-site Scripting (XSS) - Stored in pimcore/customer-data-framework

medium
6.5
First published (updated )
CVE-2023-4145

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Pimcore PimcoreCross-site Scripting (XSS) - Reflected in pimcore/pimcore

medium
6.1
First published (updated )
CVE-2023-3822

Pimcore PimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
6.1
First published (updated )
CVE-2023-3821

Pimcore PimcoreSQL Injection in pimcore/pimcore

high
7.2
EPSS
0.05%
First published (updated )
CVE-2023-3820

Pimcore PimcoreExposure of Sensitive Information to an Unauthorized Actor in pimcore/pimcore

high
7.6
EPSS
0.07%
First published (updated )
CVE-2023-3819

Pimcore PimcoreSQL Injection in pimcore/pimcore

high
7.2
First published (updated )
CVE-2023-3673

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Pimcore Admin Classic BundlePimcore admin UI vulnerable to Cross-site Scripting in two factor authentication setup page

medium
6.1
First published (updated )
CVE-2023-37280

Pimcore Customer Management FrameworkImproper Authorization in pimcore/customer-data-framework

medium
6.5
First published (updated )
CVE-2023-3574

Pimcore PimcorePath Traversal: '\..\filename' in pimcore/pimcore

high
8.8
First published (updated )
CVE-2023-2984

Pimcore PimcorePrivilege Defined With Unsafe Actions in pimcore/pimcore

high
8.8
First published (updated )
CVE-2023-2983

Pimcore Customer-data-frameworkStoring Passwords in a Recoverable Format in pimcore/customer-data-framework

medium
6.7
First published (updated )
CVE-2023-2881

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Pimcore Customer Management FrameworkSQL Injection in pimcore/customer-data-framework

high
7.2
First published (updated )
CVE-2023-2756

Pimcore PimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
6.3
First published (updated )
CVE-2023-2730

Pimcore Customer Management FrameworkPimcore vulnerable to Business Logic Errors in Customer automation rules

medium
4.3
First published (updated )
CVE-2023-32075

Pimcore Customer Management FrameworkImproper Neutralization of Formula Elements in a CSV File in pimcore/customer-data-framework

high
7.8
First published (updated )
CVE-2023-2629

Pimcore PimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
5.7
First published (updated )
CVE-2023-2630

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Pimcore PimcoreCross-site Scripting (XSS) - DOM in pimcore/pimcore

medium
6.8
First published (updated )
CVE-2023-2614

Pimcore PimcoreCross-site Scripting (XSS) - Reflected in pimcore/pimcore

medium
6.8
First published (updated )
CVE-2023-2615

Pimcore PimcoreCross-site Scripting (XSS) - Generic in pimcore/pimcore

medium
6.8
First published (updated )
CVE-2023-2616

Pimcore PimcorePimcore Path Traversal Vulnerability in AdminBundle/Controller/Reports/CustomReportController.php

high
7.5
First published (updated )
CVE-2023-30855

Pimcore PimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
6.3
First published (updated )
CVE-2023-2361

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

composer/pimcore/pimcoreStored Cross-site Scripting (XSS) in pimcore/pimcore

medium
4.8
First published (updated )
CVE-2023-2332

Pimcore PimcorePimcore Arbitrary File Read in Admin JS CSS files

medium
4.9
First published (updated )
CVE-2023-30852

Pimcore PimcorePimcore SQL Injection Vulnerability in Admin Translations API

high
8.8
First published (updated )
CVE-2023-30850

Pimcore PimcorePimcore vulnerable to SQL Injection in Translation Export API

high
8.8
First published (updated )
CVE-2023-30849

Pimcore PimcorePimcore SQL Injection Vulnerability in Admin Search Find API

high
8.8
First published (updated )
CVE-2023-30848

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

composer/pimcore/pimcoreCross-site Scripting (XSS) - Generic in pimcore/pimcore

high
7.3
First published (updated )
CVE-2023-2341

composer/pimcore/pimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
6.1
First published (updated )
CVE-2023-2340

Pimcore PimcoreCross-site Scripting (XSS) - Reflected in pimcore/pimcore

medium
6.1
First published (updated )
CVE-2023-2339

composer/pimcore/pimcoreSQL Injection in pimcore/pimcore

high
8.8
First published (updated )
CVE-2023-2338

composer/pimcore/pimcoreCross-site Scripting (XSS) - Reflected in pimcore/pimcore

medium
5.4
First published (updated )
CVE-2023-2342

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203