Vulnerabilidades em Pimcore

143 resultados
Análise Vexday

Pimcore apresenta um perfil de risco contido com apenas 3 vulnerabilidades registradas, nenhuma sob exploração ativa no momento. A fraqueza predominante é SQL injection (CWE-89), indicando exposição a ataques de injeção de código em camada de dados. Não há vulnerabilidades críticas ou atualizações de risco nos últimos 90 dias, sugerindo um nível de atividade baixo no ecossistema.

CVE-2024-23648HIGHPimcore Admin Classic Bundle host header injection in the password resetEPSS 0.8%CVE-2022-0911MEDIUMCross-site Scripting (XSS) - Stored in pimcore/pimcoreEPSS 0.8%CVE-2022-0893MEDIUMCross-site Scripting (XSS) - Stored in pimcore/pimcoreEPSS 0.8%CVE-2021-4146MEDIUMBusiness Logic Errors in pimcore/pimcoreEPSS 0.8%CVE-2020-26246HIGHAuthorization bypass in PimcoreEPSS 0.8%CVE-2023-30855MEDIUMPimcore Path Traversal Vulnerability in AdminBundle/Controller/Reports/CustomReportController.phpEPSS 0.8%CVE-2023-30850HIGHPimcore SQL Injection Vulnerability in Admin Translations APIEPSS 0.8%CVE-2023-30849HIGHPimcore vulnerable to SQL Injection in Translation Export APIEPSS 0.8%CVE-2022-1351MEDIUMStored XSS in Tooltip in pimcore/pimcoreEPSS 0.8%CVE-2023-5192MEDIUMExcessive Data Query Operations in a Large Data Table in pimcore/demoEPSS 0.8%CVE-2021-39166HIGHImproper Neutralization of Text-Values in Object Version PreviewEPSS 0.8%CVE-2023-32075MEDIUMPimcore vulnerable to Business Logic Errors in Customer automation rulesEPSS 0.8%CVE-2024-32871HIGHPimcore Vulnerable to Flooding Server with Thumbnail filesEPSS 0.8%CVE-2021-4081MEDIUMCross-site Scripting (XSS) - Reflected in pimcore/pimcoreEPSS 0.8%CVE-2023-30848HIGHPimcore SQL Injection Vulnerability in Admin Search Find APIEPSS 0.7%CVE-2024-29197MEDIUMPimcore Preview Documents are not restricted to logged in users anymoreEPSS 0.7%CVE-2022-0251HIGHCross-site Scripting (XSS) - Stored in pimcore/pimcoreEPSS 0.7%CVE-2023-28106MEDIUMPimcore vulnerable to Cross-site Scripting in UrlSlug Data typeEPSS 0.7%CVE-2022-0894HIGHCross-site Scripting (XSS) - Stored in pimcore/pimcoreEPSS 0.7%CVE-2022-3255MEDIUMCross-site Scripting (XSS) - Reflected in pimcore/pimcoreEPSS 0.7%