Vulnerabilities (CVE)

Filtered by vendor Pimcore Subscribe
Total 140 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-30850 1 Pimcore 1 Pimcore 2024-11-21 N/A 8.8 HIGH
Pimcore is an open source data and experience management platform. Prior to version 10.5.21, a SQL Injection vulnerability exists in the admin translations API. Users should update to version 10.5.21 to receive a patch or, as a workaround, or apply the patch manually.
CVE-2023-30849 1 Pimcore 1 Pimcore 2024-11-21 N/A 8.8 HIGH
Pimcore is an open source data and experience management platform. Prior to version 10.5.21, A SQL injection vulnerability exists in the translation export API. Users should update to version 10.5.21 to receive a patch or, as a workaround, or apply the patch manually.
CVE-2023-30848 1 Pimcore 1 Pimcore 2024-11-21 N/A 8.8 HIGH
Pimcore is an open source data and experience management platform. Prior to version 10.5.21, the admin search find API has a SQL injection vulnerability. Users should upgrade to version 10.5.21 to receive a patch or, as a workaround, apply the patch manually.
CVE-2023-2984 2 Microsoft, Pimcore 2 Windows, Pimcore 2024-11-21 N/A 8.8 HIGH
Path Traversal: '\..\filename' in GitHub repository pimcore/pimcore prior to 10.5.22.
CVE-2023-2983 1 Pimcore 1 Pimcore 2024-11-21 N/A 8.8 HIGH
Privilege Defined With Unsafe Actions in GitHub repository pimcore/pimcore prior to 10.5.23.
CVE-2023-2881 1 Pimcore 1 Customer-data-framework 2024-11-21 N/A 4.9 MEDIUM
Storing Passwords in a Recoverable Format in GitHub repository pimcore/customer-data-framework prior to 3.3.10.
CVE-2023-2756 1 Pimcore 1 Customer Management Framework 2024-11-21 N/A 7.2 HIGH
SQL Injection in GitHub repository pimcore/customer-data-framework prior to 3.3.10.
CVE-2023-2730 1 Pimcore 1 Pimcore 2024-11-21 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3.
CVE-2023-2630 1 Pimcore 1 Pimcore 2024-11-21 N/A 4.8 MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2629 1 Pimcore 1 Customer Management Framework 2024-11-21 N/A 7.8 HIGH
Improper Neutralization of Formula Elements in a CSV File in GitHub repository pimcore/customer-data-framework prior to 3.3.9.
CVE-2023-2616 1 Pimcore 1 Pimcore 2024-11-21 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2615 1 Pimcore 1 Pimcore 2024-11-21 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2614 1 Pimcore 1 Pimcore 2024-11-21 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2361 1 Pimcore 1 Pimcore 2024-11-21 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2343 1 Pimcore 1 Pimcore 2024-11-21 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2342 1 Pimcore 1 Pimcore 2024-11-21 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2341 1 Pimcore 1 Pimcore 2024-11-21 N/A 6.1 MEDIUM
Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2340 1 Pimcore 1 Pimcore 2024-11-21 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2339 1 Pimcore 1 Pimcore 2024-11-21 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2338 1 Pimcore 1 Pimcore 2024-11-21 N/A 8.8 HIGH
SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.21.