pimcore Vulnerability Advisory Catalog

Total 155 security vulnerabilities recorded for pimcore software and firmware.

← Back to All Vendors
Component: customer_management_framework

The Customer Management Framework (CMF) for Pimcore adds functionality for customer data management. In `pimcore/customer-management-framework-bundle`...

📅 2023-05-11
CVSS 4.3 Dossier →
CVE-2023-2630 MEDIUM
Component: pimcore

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21....

📅 2023-05-10
CVSS 4.8 Dossier →
Component: customer_management_framework

Improper Neutralization of Formula Elements in a CSV File in GitHub repository pimcore/customer-data-framework prior to 3.3.9....

📅 2023-05-10
CVSS 7.8 Dossier →
CVE-2023-2615 MEDIUM
Component: pimcore

Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21....

📅 2023-05-10
CVSS 5.4 Dossier →
CVE-2023-2614 MEDIUM
Component: pimcore

Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.21....

📅 2023-05-10
CVSS 5.4 Dossier →
CVE-2023-2616 MEDIUM
Component: pimcore

Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21....

📅 2023-05-10
CVSS 5.4 Dossier →
Component: pimcore

Pimcore is an open source data and experience management platform. Versions of Pimcore prior to 10.5.18 are vulnerable to path traversal. The impact o...

📅 2023-05-08
CVSS 6.5 Dossier →
CVE-2023-2361 MEDIUM
Component: pimcore

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21....

📅 2023-04-28
CVSS 5.4 Dossier →
Component: pimcore

Pimcore is an open source data and experience management platform. Prior to version 10.5.21, the `/admin/misc/script-proxy` API endpoint that is acces...

📅 2023-04-27
CVSS 4.4 Dossier →
Component: pimcore

Pimcore is an open source data and experience management platform. Prior to version 10.5.21, a SQL Injection vulnerability exists in the admin transla...

📅 2023-04-27
CVSS 8.8 Dossier →
Component: pimcore

Pimcore is an open source data and experience management platform. Prior to version 10.5.21, A SQL injection vulnerability exists in the translation e...

📅 2023-04-27
CVSS 8.8 Dossier →
Component: pimcore

Pimcore is an open source data and experience management platform. Prior to version 10.5.21, the admin search find API has a SQL injection vulnerabili...

📅 2023-04-27
CVSS 8.8 Dossier →
CVE-2023-2343 MEDIUM
Component: pimcore

Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.21....

📅 2023-04-27
CVSS 5.4 Dossier →
CVE-2023-2342 MEDIUM
Component: pimcore

Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21....

📅 2023-04-27
CVSS 5.4 Dossier →
CVE-2023-2341 MEDIUM
Component: pimcore

Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21....

📅 2023-04-27
CVSS 6.1 Dossier →
CVE-2023-2340 MEDIUM
Component: pimcore

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21....

📅 2023-04-27
CVSS 5.4 Dossier →
CVE-2023-2339 MEDIUM
Component: pimcore

Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21....

📅 2023-04-27
CVSS 5.4 Dossier →
Component: pimcore

SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.21....

📅 2023-04-27
CVSS 8.8 Dossier →
CVE-2023-2336 MEDIUM
Component: pimcore

Path Traversal in GitHub repository pimcore/pimcore prior to 10.5.21....

📅 2023-04-27
CVSS 6.5 Dossier →
CVE-2023-2328 MEDIUM
Component: pimcore

Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21....

📅 2023-04-27
CVSS 5.4 Dossier →
CVE-2023-2327 MEDIUM
Component: pimcore

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21....

📅 2023-04-27
CVSS 5.4 Dossier →
CVE-2023-2323 MEDIUM
Component: pimcore

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21....

📅 2023-04-27
CVSS 5.4 Dossier →
CVE-2023-2322 MEDIUM
Component: pimcore

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21....

📅 2023-04-27
CVSS 5.4 Dossier →
Component: perspective_editor

Pimcore Perspective Editor provides an editor for Pimcore that allows users to add/remove/edit custom views and perspectives. This vulnerability has t...

📅 2023-04-03
CVSS 6.1 Dossier →
Page 3 of 7 (155 Total Records)