Pimcore

Source repositories

https://github.com/pimcore/pimcore

CVEs (141)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2022-0832	Pimcore Pimcore	Med	0.33	5.4	0.67	Mar 4, 2022	Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3.
CVE-2022-0262	Pimcore Pimcore	Med	0.33	6.1	0.02	Jan 18, 2022	Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.7.
CVE-2021-4084	Pimcore Pimcore	Med	0.33	6.1	0.02	Dec 10, 2021	pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4081	Pimcore Pimcore	Med	0.33	6.1	0.01	Dec 10, 2021	pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-18982	Pimcore Pimcore	Med	0.33	6.1	0.01	Nov 15, 2019	bundles/AdminBundle/Controller/Admin/EmailController.php in Pimcore before 6.3.0 allows script execution in the Email Log preview window because of the lack of a Content-Security-Policy header.
CVE-2019-18656	Pimcore Pimcore	Med	0.33	6.1	0.01	Oct 31, 2019	Pimcore 6.2.3 has XSS in the translations grid because bundles/AdminBundle/Resources/public/js/pimcore/settings/translations.js mishandles certain HTML elements.
CVE-2024-49370	Pimcore Pimcore	Med	0.32	4.9	0.01	Oct 23, 2024	Pimcore is an open source data and experience management platform. When a PortalUserObject is connected to a PimcoreUser and "Use Pimcore Backend Password" is set to true, the change password function in Portal Profile sets the new password. Prior to Pimcore portal engine…
CVE-2023-5873	Pimcore Pimcore	Med	0.28	5.4	0.00	Oct 31, 2023	Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 11.1.0.
CVE-2023-4453	Pimcore Pimcore	Med	0.28	5.4	0.01	Aug 21, 2023	Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.6.8.
CVE-2023-3821	Pimcore Pimcore	Med	0.28	5.4	0.01	Jul 21, 2023	Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.6.4.
CVE-2023-2730	Pimcore Pimcore	Med	0.28	5.4	0.00	May 16, 2023	Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3.
CVE-2023-2615	Pimcore Pimcore	Med	0.28	5.4	0.01	May 10, 2023	Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2614	Pimcore Pimcore	Med	0.28	5.4	0.01	May 10, 2023	Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2616	Pimcore Pimcore	Med	0.28	5.4	0.01	May 10, 2023	Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2361	Pimcore Pimcore	Med	0.28	5.4	0.00	Apr 28, 2023	Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2343	Pimcore Pimcore	Med	0.28	5.4	0.00	Apr 27, 2023	Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2342	Pimcore Pimcore	Med	0.28	5.4	0.00	Apr 27, 2023	Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2340	Pimcore Pimcore	Med	0.28	5.4	0.00	Apr 27, 2023	Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2339	Pimcore Pimcore	Med	0.28	5.4	0.01	Apr 27, 2023	Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2328	Pimcore Pimcore	Med	0.28	5.4	0.00	Apr 27, 2023	Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.

CVE-2022-0832MedMar 4, 2022
Pimcore
Pimcore
risk 0.33cvss 5.4epss 0.67
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3.
CVE-2022-0262MedJan 18, 2022
Pimcore
Pimcore
risk 0.33cvss 6.1epss 0.02
Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.7.
CVE-2021-4084MedDec 10, 2021
Pimcore
Pimcore
risk 0.33cvss 6.1epss 0.02
pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4081MedDec 10, 2021
Pimcore
Pimcore
risk 0.33cvss 6.1epss 0.01
pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-18982MedNov 15, 2019
Pimcore
Pimcore
risk 0.33cvss 6.1epss 0.01
bundles/AdminBundle/Controller/Admin/EmailController.php in Pimcore before 6.3.0 allows script execution in the Email Log preview window because of the lack of a Content-Security-Policy header.
CVE-2019-18656MedOct 31, 2019
Pimcore
Pimcore
risk 0.33cvss 6.1epss 0.01
Pimcore 6.2.3 has XSS in the translations grid because bundles/AdminBundle/Resources/public/js/pimcore/settings/translations.js mishandles certain HTML elements.
CVE-2024-49370MedOct 23, 2024
Pimcore
Pimcore
risk 0.32cvss 4.9epss 0.01
Pimcore is an open source data and experience management platform. When a PortalUserObject is connected to a PimcoreUser and "Use Pimcore Backend Password" is set to true, the change password function in Portal Profile sets the new password. Prior to Pimcore portal engine…
CVE-2023-5873MedOct 31, 2023
Pimcore
Pimcore
risk 0.28cvss 5.4epss 0.00
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 11.1.0.
CVE-2023-4453MedAug 21, 2023
Pimcore
Pimcore
risk 0.28cvss 5.4epss 0.01
Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.6.8.
CVE-2023-3821MedJul 21, 2023
Pimcore
Pimcore
risk 0.28cvss 5.4epss 0.01
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.6.4.
CVE-2023-2730MedMay 16, 2023
Pimcore
Pimcore
risk 0.28cvss 5.4epss 0.00
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3.
CVE-2023-2615MedMay 10, 2023
Pimcore
Pimcore
risk 0.28cvss 5.4epss 0.01
Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2614MedMay 10, 2023
Pimcore
Pimcore
risk 0.28cvss 5.4epss 0.01
Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2616MedMay 10, 2023
Pimcore
Pimcore
risk 0.28cvss 5.4epss 0.01
Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2361MedApr 28, 2023
Pimcore
Pimcore
risk 0.28cvss 5.4epss 0.00
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2343MedApr 27, 2023
Pimcore
Pimcore
risk 0.28cvss 5.4epss 0.00
Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2342MedApr 27, 2023
Pimcore
Pimcore
risk 0.28cvss 5.4epss 0.00
Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2340MedApr 27, 2023
Pimcore
Pimcore
risk 0.28cvss 5.4epss 0.00
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2339MedApr 27, 2023
Pimcore
Pimcore
risk 0.28cvss 5.4epss 0.01
Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.
CVE-2023-2328MedApr 27, 2023
Pimcore
Pimcore
risk 0.28cvss 5.4epss 0.00
Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.

Page 4 of 8