Total 155 security vulnerabilities recorded for pimcore software and firmware.
Customer-data-framework allows management of customer data within Pimcore. There are no tokens or headers to prevent CSRF attacks from occurring, ther...
The Admin Classic Bundle provides a Backend UI for Pimcore. `AdminBundle\Security\PimcoreUserTwoFactorCondition` introduced in v11 disable the two fac...
Pimcore is an Open Source Data & Experience Management Platform. In affected versions the `/admin/object/grid-proxy` endpoint calls `getFilterConditio...
The Pimcore Admin Classic Bundle provides a Backend UI for Pimcore. Full Path Disclosure (FPD) vulnerabilities enable the attacker to see the path to ...
The Pimcore Admin Classic Bundle provides a backend UI for Pimcore. Prior to version 1.2.0, a cross-site scripting vulnerability has the potential to ...
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 11.1.0....
Unverified Password Change in GitHub repository pimcore/admin-ui-classic-bundle prior to 1.2.0....
Excessive Data Query Operations in a Large Data Table in GitHub repository pimcore/demo prior to 10.3.0....
Pimcore admin-ui-classic-bundle provides a Backend UI for Pimcore. The translation value with text including ā%sā (from ā%suggest%) is parsed by sprin...
Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.6.8....
Pimcore is an Open Source Data & Experience Management Platform: PIM, MDM, CDP, DAM, DXP/CMS & Digital Commerce. A path traversal vulnerability exists...
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/customer-data-framework prior to 3.4.2....
Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.6.4....
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.6.4....
SQL Injection in GitHub repository pimcore/pimcore prior to 10.6.4....
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pimcore/pimcore prior to 10.6.4....
SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.24....
Pimcore Admin Classic Bundle provides a Backend UI for Pimcore based on the ExtJS framework. An admin who has not setup two factor authentication befo...
Improper Authorization in GitHub repository pimcore/customer-data-framework prior to 3.4.1....
Path Traversal: '\..\filename' in GitHub repository pimcore/pimcore prior to 10.5.22....
Privilege Defined With Unsafe Actions in GitHub repository pimcore/pimcore prior to 10.5.23....
Storing Passwords in a Recoverable Format in GitHub repository pimcore/customer-data-framework prior to 3.3.10....
SQL Injection in GitHub repository pimcore/customer-data-framework prior to 3.3.10....
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3....