Pimcore vulnerabilities
151 CVEs and advisories name Pimcore as an affected vendor, newest first. Follow it as a feed.
- CVE-2022-0704Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2022-0911Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2022-0893Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2022-0894Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2022-0832Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2022-0831Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2022-0665Path Traversal in pimcore/pimcore
- CVE-2022-0565Cross-site Scripting in pimcore/pimcore
- CVE-2022-0510Cross-site Scripting (XSS) - Reflected in pimcore/pimcore
- CVE-2022-0509Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2022-0348Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2022-0251Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2022-0285Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2022-0263Unrestricted Upload of File with Dangerous Type in pimcore/pimcore
- CVE-2022-0262Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2021-4146Business Logic Errors in pimcore/pimcore
- CVE-2022-0260Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2022-0257Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2022-0258SQL Injection in pimcore/pimcore
- CVE-2022-0256Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2021-4139Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2021-4084Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2021-4081Cross-site Scripting (XSS) - Reflected in pimcore/pimcore
- CVE-2021-4082Cross-Site Request Forgery (CSRF) in pimcore/pimcore
- CVE-2021-39189Observable Response Discrepancy in Lost Password Service
- CVE-2021-39170Improper Encoding or Escaping of Output in Asset Metadata Component
- CVE-2021-39166Improper Neutralization of Text-Values in Object Version Preview
- CVE-2021-37702Improper Neutralization of Formula Elements in a CSV File in pimcore/pimcore
- CVE-2021-31869Pimcore AdminBundle 'specificID' SQL Injection
- CVE-2021-31867Pimcore Customer Data Framework 'SegmentAssignmentController.php' Blind SQL Injection