Vulnerabilidades en pimcore

149 resultados
Análisis Vexday

Com 132 CVEs catalogadas e nenhuma registrada no catálogo de exploração ativa da CISA KEV, o Pimcore apresenta taxa de exploração abaixo da média geral do catálogo. O tipo de falha mais recorrente é CWE-79 (Cross-Site Scripting), padrão que tende a predominar em plataformas com interfaces web extensas e edição de conteúdo. Apesar da ausência de exploração confirmada, o CVE-2022-0832 merece atenção prioritária: seu score EPSS de 0,6662 indica probabilidade elevada de exploração em comparação com a base geral de vulnerabilidades, o que sugere que agentes de ameaça têm interesse técnico na falha mesmo sem registro formal de uso ativo. O surgimento de 2 novas CVEs nos últimos 90 dias indica manutenção contínua de superfície de ataque, e equipes responsáveis por instâncias do Pimcore devem monitorar atualizações de patch com regularidade.

CVE-2023-2984MEDIUMPath Traversal: '\..\filename' in pimcore/pimcoreEPSS 0.9%CVE-2024-23648HIGHPimcore Admin Classic Bundle host header injection in the password resetEPSS 0.8%CVE-2020-26246HIGHAuthorization bypass in PimcoreEPSS 0.8%CVE-2022-0893MEDIUMCross-site Scripting (XSS) - Stored in pimcore/pimcoreEPSS 0.8%CVE-2022-1351MEDIUMStored XSS in Tooltip in pimcore/pimcoreEPSS 0.8%CVE-2022-3255MEDIUMCross-site Scripting (XSS) - Reflected in pimcore/pimcoreEPSS 0.8%CVE-2022-0911MEDIUMCross-site Scripting (XSS) - Stored in pimcore/pimcoreEPSS 0.8%CVE-2021-4146MEDIUMBusiness Logic Errors in pimcore/pimcoreEPSS 0.8%CVE-2023-30855MEDIUMPimcore Path Traversal Vulnerability in AdminBundle/Controller/Reports/CustomReportController.phpEPSS 0.8%CVE-2023-30849HIGHPimcore vulnerable to SQL Injection in Translation Export APIEPSS 0.8%CVE-2023-30850HIGHPimcore SQL Injection Vulnerability in Admin Translations APIEPSS 0.8%CVE-2023-5192MEDIUMExcessive Data Query Operations in a Large Data Table in pimcore/demoEPSS 0.8%CVE-2021-39166HIGHImproper Neutralization of Text-Values in Object Version PreviewEPSS 0.8%CVE-2024-32871HIGHPimcore Vulnerable to Flooding Server with Thumbnail filesEPSS 0.8%CVE-2023-32075MEDIUMPimcore vulnerable to Business Logic Errors in Customer automation rulesEPSS 0.8%CVE-2021-4081MEDIUMCross-site Scripting (XSS) - Reflected in pimcore/pimcoreEPSS 0.8%CVE-2023-30848HIGHPimcore SQL Injection Vulnerability in Admin Search Find APIEPSS 0.7%CVE-2024-29197MEDIUMPimcore Preview Documents are not restricted to logged in users anymoreEPSS 0.7%CVE-2022-0251HIGHCross-site Scripting (XSS) - Stored in pimcore/pimcoreEPSS 0.7%CVE-2023-28106MEDIUMPimcore vulnerable to Cross-site Scripting in UrlSlug Data typeEPSS 0.7%