Skip to content
OpenAdvisories

Vendor

pimcore

151 known vulnerabilities.

Products

pimcore/pimcore 75 pimcore 45 admin-ui-classic-bundle 12 Pimcore Customer Data Framework 6 customer-data-framework 5 pimcore admin-ui-classic-bundle 2 Pimcore AdminBundle 1 ecommerce-framework-bundle 1 Pimcore CMS/DXP 1 pimcore/demo 1 perspective-editor 1 pimcore/data-hub 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-55634

    Pimcore: Remote Code Execution via DataObject Class-Definition Field Name

    Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, the class-definition import endpoint /pimcore-studio/api/class/definition/configuration-view/detail/{id}/import accepts a DataObject field name that is e…

    pimcore pimcore pimcore/pimcore Packagist
  • Critical 9.3
    CVE-2026-55220

    Pimcore Hotspotimage getDataFromResource() unrestricted Serialize::unserialize over object-store column

    Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, Pimcore\Model\DataObject\ClassDefinition\Data\Hotspotimage::getDataFromResource() in models/DataObject/ClassDefinition/Data/Hotspotimage.php passes the f…

    pimcore pimcore pimcore/pimcore Packagist
  • Critical 9.8
    CVE-2022-39365

    RCE vulnerability in Pimcore/Mail & Dynamic Text Layout

    Pimcore is an open source data and experience management platform. Prior to version 10.5.9, the user controlled twig templates rendering in `Pimcore/Mail` & `ClassDefinition\Layout\Text` is vulnerable to server-side template injection, which could lead to rem…

    pimcore pimcore pimcore/pimcore Packagist