Product · pimcore

pimcore/pimcore

75 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

High 7.2

CVE-2023-3820

SQL Injection in pimcore/pimcore

SQL Injection in GitHub repository pimcore/pimcore prior to 10.6.4.

pimcore pimcore/pimcore pimcore/pimcore Packagist

Jul 21, 2023
High 7.6

CVE-2023-3819

Exposure of Sensitive Information to an Unauthorized Actor in pimcore/pimcore

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pimcore/pimcore prior to 10.6.4.

pimcore pimcore/pimcore pimcore/pimcore Packagist

Jul 21, 2023
High 7.2

CVE-2023-3673

SQL Injection in pimcore/pimcore

SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.24.

pimcore pimcore/pimcore pimcore/pimcore Packagist

Jul 14, 2023
High 7.3

CVE-2023-2341

Cross-site Scripting (XSS) - Generic in pimcore/pimcore

Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.

pimcore pimcore/pimcore pimcore/pimcore Packagist

Apr 27, 2023
High 7.2

CVE-2023-2338

SQL Injection in pimcore/pimcore

SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.21.

pimcore pimcore/pimcore pimcore/pimcore Packagist

Apr 27, 2023
High 7.6

CVE-2023-1115

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.

pimcore pimcore/pimcore pimcore/pimcore Packagist

Mar 1, 2023
High 7.2

CVE-2022-1429 EPSS 64%

SQL injection in GridHelperService.php in pimcore/pimcore

SQL injection in GridHelperService.php in GitHub repository pimcore/pimcore prior to 10.3.6. This vulnerability is capable of steal the data

pimcore pimcore/pimcore pimcore/pimcore Packagist

Apr 22, 2022
High 8.8

CVE-2022-1339

SQL injection in ElementController.php in pimcore/pimcore

SQL injection in ElementController.php in GitHub repository pimcore/pimcore prior to 10.3.5. This vulnerability is capable of steal the data

pimcore pimcore/pimcore pimcore/pimcore Packagist

Apr 13, 2022
High 7.2

CVE-2022-1219

SQL injection in RecyclebinController.php in pimcore/pimcore

SQL injection in RecyclebinController.php in GitHub repository pimcore/pimcore prior to 10.3.5. This vulnerability is capable of steal the data

pimcore pimcore/pimcore pimcore/pimcore Packagist

Apr 8, 2022
High 8.2

CVE-2022-0894

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.

pimcore pimcore/pimcore pimcore/pimcore Packagist

Mar 15, 2022
High 7.6

CVE-2022-0565

Cross-site Scripting in pimcore/pimcore

Cross-site Scripting in Packagist pimcore/pimcore prior to 10.3.1.

pimcore pimcore/pimcore pimcore/pimcore Packagist

Feb 12, 2022
High 8.1

CVE-2022-0251

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.2.10.

pimcore pimcore/pimcore pimcore/pimcore Packagist

Jan 26, 2022
High 8.3

CVE-2022-0258

SQL Injection in pimcore/pimcore

pimcore is vulnerable to Improper Neutralization of Special Elements used in an SQL Command

pimcore pimcore/pimcore pimcore/pimcore Packagist

Jan 17, 2022
High 7.4

CVE-2021-4084

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

pimcore pimcore/pimcore pimcore/pimcore Packagist

Dec 10, 2021