Filter
AND

Software

pimcore pimcore
68
pimcore admin classic bundle
4
pimcore customer management framework
4
pimcore core
1
pimcore customer data framework
1
pimcore customer-data-framework
1
pimcore data-hub
1
pimcore e-commerce framework
1
pimcore perspective editor
1

composer/pimcore/customer-management-framework-bundlepimcore/customer-data-framework is the Customer Management Framework for management of customer data…

medium
6.5
EPSS
0.05%
First published (updated )
CVE-2024-21667

composer/pimcore/customer-management-framework-bundleThe Customer Management Framework (CMF) for Pimcore adds functionality for customer data management,…

medium
6.5
EPSS
0.05%
First published (updated )
CVE-2024-21666

composer/pimcore/ecommerce-framework-bundleecommerce-framework-bundle is the Pimcore Ecommerce Framework Bundle. An authenticated and unauthori…

medium
4.3
EPSS
0.05%
First published (updated )
CVE-2024-21665

Pimcore PimcorePimcore missing token/header to prevent CSRF

medium
6.5
First published (updated )
CVE-2023-49076

composer/pimcore/admin-ui-classic-bundleFull Path Disclosure via re-export document in pimcore/admin-ui-classic-bundle

medium
5.3
First published (updated )
CVE-2023-47636

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

composer/pimcore/admin-ui-classic-bundlePimcore Admin Classic Bundle Cross-site Scripting (XSS) in PDF previews

medium
6.1
First published (updated )
CVE-2023-46722

composer/pimcore/pimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
5.4
EPSS
0.09%
First published (updated )
CVE-2023-5873

Pimcore CoreExcessive Data Query Operations in a Large Data Table in pimcore/demo

medium
6.5
First published (updated )
CVE-2023-5192

composer/pimcore/admin-ui-classic-bundleCross-site Scripting (XSS) in pimcore admin-ui-classic-bundle translations

medium
5.4
First published (updated )
CVE-2023-42817

Pimcore PimcoreCross-site Scripting (XSS) - Reflected in pimcore/pimcore

medium
6.4
First published (updated )
CVE-2023-4453

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

composer/pimcore/customer-management-framework-bundleCross-site Scripting (XSS) - Stored in pimcore/customer-data-framework

medium
6.5
First published (updated )
CVE-2023-4145

Pimcore PimcoreCross-site Scripting (XSS) - Reflected in pimcore/pimcore

medium
6.1
First published (updated )
CVE-2023-3822

Pimcore PimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
6.1
First published (updated )
CVE-2023-3821

Pimcore Admin Classic BundlePimcore admin UI vulnerable to Cross-site Scripting in two factor authentication setup page

medium
6.1
First published (updated )
CVE-2023-37280

Pimcore Customer Management FrameworkImproper Authorization in pimcore/customer-data-framework

medium
6.5
First published (updated )
CVE-2023-3574

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Pimcore Customer-data-frameworkStoring Passwords in a Recoverable Format in pimcore/customer-data-framework

medium
6.7
First published (updated )
CVE-2023-2881

Pimcore PimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
6.3
First published (updated )
CVE-2023-2730

Pimcore Customer Management FrameworkPimcore vulnerable to Business Logic Errors in Customer automation rules

medium
4.3
First published (updated )
CVE-2023-32075

Pimcore PimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
5.7
First published (updated )
CVE-2023-2630

Pimcore PimcoreCross-site Scripting (XSS) - DOM in pimcore/pimcore

medium
6.8
First published (updated )
CVE-2023-2614

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Pimcore PimcoreCross-site Scripting (XSS) - Reflected in pimcore/pimcore

medium
6.8
First published (updated )
CVE-2023-2615

Pimcore PimcoreCross-site Scripting (XSS) - Generic in pimcore/pimcore

medium
6.8
First published (updated )
CVE-2023-2616

Pimcore PimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
6.3
First published (updated )
CVE-2023-2361

composer/pimcore/pimcoreStored Cross-site Scripting (XSS) in pimcore/pimcore

medium
4.8
First published (updated )
CVE-2023-2332

Pimcore PimcorePimcore Arbitrary File Read in Admin JS CSS files

medium
4.9
First published (updated )
CVE-2023-30852

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

composer/pimcore/pimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
6.1
First published (updated )
CVE-2023-2340

Pimcore PimcoreCross-site Scripting (XSS) - Reflected in pimcore/pimcore

medium
6.1
First published (updated )
CVE-2023-2339

composer/pimcore/pimcoreCross-site Scripting (XSS) - Reflected in pimcore/pimcore

medium
5.4
First published (updated )
CVE-2023-2342

Pimcore PimcoreCross-site Scripting (XSS) - DOM in pimcore/pimcore

medium
5.4
First published (updated )
CVE-2023-2343

Pimcore PimcorePath Traversal in pimcore/pimcore

medium
6.5
First published (updated )
CVE-2023-2336

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Pimcore PimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
6.8
First published (updated )
CVE-2023-2323

Pimcore PimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
5.4
First published (updated )
CVE-2023-2322

Pimcore PimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
5.4
First published (updated )
CVE-2023-2327

Pimcore PimcoreCross-site Scripting (XSS) - Generic in pimcore/pimcore

medium
5.4
First published (updated )
CVE-2023-2328

Pimcore Perspective EditorPimcore Perspective Editor vulnerable to Cross-site Scripting in perspective name

medium
6.1
First published (updated )
CVE-2023-28850

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Pimcore PimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
5.4
First published (updated )
CVE-2023-1704

Pimcore PimcoreCross-site Scripting (XSS) - Generic in pimcore/pimcore

medium
5.4
First published (updated )
CVE-2023-1702

Pimcore PimcoreCross-site Scripting (XSS) - Reflected in pimcore/pimcore

medium
5.4
First published (updated )
CVE-2023-1701

Pimcore PimcoreCross-site Scripting (XSS) - Generic in pimcore/pimcore

medium
5.4
First published (updated )
CVE-2023-1703

Pimcore PimcorePimcore has Cross-site Scripting vulnerability in DataObject tooltip field

medium
6.1
First published (updated )
CVE-2023-28429

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Pimcore PimcoreCross-site Scripting (XSS) - DOM in pimcore/pimcore

medium
4.8
First published (updated )
CVE-2023-1517

Pimcore PimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
5.4
First published (updated )
CVE-2023-1515

Pimcore PimcoreXSS

medium
6.1
First published (updated )
CVE-2023-28106

Pimcore PimcoreCross-site Scripting (XSS) - Reflected in pimcore/pimcore

medium
5.4
First published (updated )
CVE-2023-1429

Pimcore PimcoreCross-site Scripting (XSS) - Reflected in pimcore/pimcore

medium
5.2
First published (updated )
CVE-2023-1312

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Pimcore PimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
4.8
First published (updated )
CVE-2023-1286

Pimcore PimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
5.4
First published (updated )
CVE-2023-1117

Pimcore PimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
5.4
First published (updated )
CVE-2023-1116

Pimcore PimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
5.4
First published (updated )
CVE-2023-1067

Pimcore PimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

medium
6.3
First published (updated )
CVE-2023-0827

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203