Vulnerabilities (CVE)

Filtered by vendor Pimcore Subscribe
Filtered by product Pimcore
Total 117 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-30848 1 Pimcore 1 Pimcore 2024-11-21 N/A 8.8 HIGH
Pimcore is an open source data and experience management platform. Prior to version 10.5.21, the admin search find API has a SQL injection vulnerability. Users should upgrade to version 10.5.21 to receive a patch or, as a workaround, apply the patch manually.
CVE-2023-2984 2 Microsoft, Pimcore 2 Windows, Pimcore 2024-11-21 N/A 8.8 HIGH
Path Traversal: '\..\filename' in GitHub repository pimcore/pimcore prior to 10.5.22.
CVE-2023-2983 1 Pimcore 1 Pimcore 2024-11-21 N/A 8.8 HIGH
Privilege Defined With Unsafe Actions in GitHub repository pimcore/pimcore prior to 10.5.23.
CVE-2023-2730 1 Pimcore 1 Pimcore 2024-11-21 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3.
CVE-2023-2630 1 Pimcore 1 Pimcore 2024-11-21 N/A 4.8 MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2616 1 Pimcore 1 Pimcore 2024-11-21 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2615 1 Pimcore 1 Pimcore 2024-11-21 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2614 1 Pimcore 1 Pimcore 2024-11-21 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2361 1 Pimcore 1 Pimcore 2024-11-21 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2343 1 Pimcore 1 Pimcore 2024-11-21 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2342 1 Pimcore 1 Pimcore 2024-11-21 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2341 1 Pimcore 1 Pimcore 2024-11-21 N/A 6.1 MEDIUM
Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2340 1 Pimcore 1 Pimcore 2024-11-21 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2339 1 Pimcore 1 Pimcore 2024-11-21 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2338 1 Pimcore 1 Pimcore 2024-11-21 N/A 8.8 HIGH
SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2336 1 Pimcore 1 Pimcore 2024-11-21 N/A 6.5 MEDIUM
Path Traversal in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2328 1 Pimcore 1 Pimcore 2024-11-21 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2327 1 Pimcore 1 Pimcore 2024-11-21 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2323 1 Pimcore 1 Pimcore 2024-11-21 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2322 1 Pimcore 1 Pimcore 2024-11-21 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.