Latest vulnerabilities for vendor "pimcore"

5.4

First published (updated )

CVE-2023-1703

Pimcore PimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

5.4

First published (updated )

CVE-2023-1704

Pimcore PimcoreCross-site Scripting (XSS) - Reflected in pimcore/pimcore

5.4

First published (updated )

CVE-2023-1701

Pimcore PimcoreCross-site Scripting (XSS) - Generic in pimcore/pimcore

5.4

First published (updated )

CVE-2023-1702

Pimcore admin-ui-classic-bundleUser enumeration in pimcore/admin-ui-classic-bundle

6.9

EPSS

0.04%

First published (updated )

CVE-2025-24980

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Pimcore Perspective EditorPimcore Perspective Editor vulnerable to Cross-site Scripting in perspective name

6.1

First published (updated )

CVE-2023-28850

Pimcore PimcoreCross-site Scripting (XSS) - Reflected in pimcore/pimcore

6.1

First published (updated )

CVE-2023-2339

Pimcore PimcorePimcore SQL Injection Vulnerability in Admin Translations API

8.8

First published (updated )

CVE-2023-30850

Pimcore PimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

6.3

First published (updated )

CVE-2023-2361

Pimcore PimcoreCross-site Scripting (XSS) - DOM in pimcore/pimcore

5.4

First published (updated )

CVE-2023-2343

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Pimcore PimcorePimcore SQL Injection Vulnerability in Admin Search Find API

8.8

First published (updated )

CVE-2023-30848

Pimcore PimcorePimcore Arbitrary File Read in Admin JS CSS files

4.9

First published (updated )

CVE-2023-30852

Pimcore PimcorePimcore Path Traversal Vulnerability in AdminBundle/Controller/Reports/CustomReportController.php

7.5

First published (updated )

CVE-2023-30855

Pimcore Customer Data FrameworkPimcore customer-data-framework list sql injection

7.2

First published (updated )

CVE-2024-11956

Pimcore PimcorePimcore Search Document cross site scripting

5.1

First published (updated )

CVE-2024-11954

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Pimcore PimcoreCross-site Scripting (XSS) - DOM in pimcore/pimcore

6.8

First published (updated )

CVE-2023-2614

Pimcore PimcoreCross-site Scripting (XSS) - Reflected in pimcore/pimcore

6.8

First published (updated )

CVE-2023-2615

Pimcore PimcoreCross-site Scripting (XSS) - Generic in pimcore/pimcore

6.8

First published (updated )

CVE-2023-2616

Pimcore Customer Management FrameworkImproper Neutralization of Formula Elements in a CSV File in pimcore/customer-data-framework

7.8

First published (updated )

CVE-2023-2629

Pimcore PimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

5.7

First published (updated )

CVE-2023-2630

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Pimcore Customer Management FrameworkPimcore vulnerable to Business Logic Errors in Customer automation rules

4.3

First published (updated )

CVE-2023-32075

composer/pimcore/customer-management-framework-bundleCross-site Scripting (XSS) - Stored in pimcore/customer-data-framework

6.5

First published (updated )

CVE-2023-4145

Pimcore PimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

6.3

First published (updated )

CVE-2023-2730

Pimcore Customer Management FrameworkSQL Injection in pimcore/customer-data-framework

7.2

First published (updated )

CVE-2023-2756

composer/pimcore/customer-management-framework-bundleStoring Passwords in a Recoverable Format in pimcore/customer-data-framework

6.7

First published (updated )

CVE-2023-2881

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Pimcore PimcorePath Traversal: '\..\filename' in pimcore/pimcore

8.8

First published (updated )

CVE-2023-2984

Pimcore PimcorePrivilege Defined With Unsafe Actions in pimcore/pimcore

8.8

First published (updated )

CVE-2023-2983

composer/pimcore/pimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

5.4

EPSS

0.09%

First published (updated )

CVE-2023-5873

composer/pimcore/admin-ui-classic-bundleUnverified Password Change in pimcore/admin-ui-classic-bundle

7.2

EPSS

0.05%

First published (updated )

CVE-2023-5844

Pimcore CoreExcessive Data Query Operations in a Large Data Table in pimcore/demo

6.5

First published (updated )

CVE-2023-5192

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.