Pimcore vulnerabilities
151 CVEs and advisories name Pimcore as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-2983Privilege Defined With Unsafe Actions in pimcore/pimcore
- CVE-2023-2881Storing Passwords in a Recoverable Format in pimcore/customer-data-framework
- CVE-2023-2756 SQL Injection in pimcore/customer-data-framework
- CVE-2023-2730Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2023-32075Pimcore vulnerable to Business Logic Errors in Customer automation rules
- CVE-2023-2630Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2023-2629Improper Neutralization of Formula Elements in a CSV File in pimcore/customer-data-framework
- CVE-2023-2616Cross-site Scripting (XSS) - Generic in pimcore/pimcore
- CVE-2023-2615Cross-site Scripting (XSS) - Reflected in pimcore/pimcore
- CVE-2023-2614Cross-site Scripting (XSS) - DOM in pimcore/pimcore
- CVE-2023-30855Pimcore Path Traversal Vulnerability in AdminBundle/Controller/Reports/CustomReportController.php
- CVE-2023-2361Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2023-30852Pimcore Arbitrary File Read in Admin JS CSS files
- CVE-2023-30850Pimcore SQL Injection Vulnerability in Admin Translations API
- CVE-2023-30849Pimcore vulnerable to SQL Injection in Translation Export API
- CVE-2023-30848Pimcore SQL Injection Vulnerability in Admin Search Find API
- CVE-2023-2343Cross-site Scripting (XSS) - DOM in pimcore/pimcore
- CVE-2023-2342Cross-site Scripting (XSS) - Reflected in pimcore/pimcore
- CVE-2023-2341Cross-site Scripting (XSS) - Generic in pimcore/pimcore
- CVE-2023-2340Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2023-2339Cross-site Scripting (XSS) - Reflected in pimcore/pimcore
- CVE-2023-2338 SQL Injection in pimcore/pimcore
- CVE-2023-2336Path Traversal in pimcore/pimcore
- CVE-2023-2328Cross-site Scripting (XSS) - Generic in pimcore/pimcore
- CVE-2023-2327Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2023-2323Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2023-2322Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2023-28850Pimcore Perspective Editor vulnerable to Cross-site Scripting in perspective name
- CVE-2023-1704Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2023-1703Cross-site Scripting (XSS) - Generic in pimcore/pimcore