Vulnerabilities > Pimcore > Admin Classic Bundle > High

DATE CVE VULNERABILITY TITLE RISK
2024-01-24 CVE-2024-23646 SQL Injection vulnerability in Pimcore Admin Classic Bundle
Pimcore's Admin Classic Bundle provides a backend user interface for Pimcore.
network
low complexity
pimcore CWE-89
8.8
2024-01-24 CVE-2024-23648 Injection vulnerability in Pimcore Admin Classic Bundle
Pimcore's Admin Classic Bundle provides a backend user interface for Pimcore.
network
low complexity
pimcore CWE-74
8.8
2023-11-28 CVE-2023-49075 Use of Single-factor Authentication vulnerability in Pimcore Admin Classic Bundle
The Admin Classic Bundle provides a Backend UI for Pimcore.
network
low complexity
pimcore CWE-308
7.2
2023-10-30 CVE-2023-5844 Improper Authentication vulnerability in Pimcore Admin Classic Bundle
Unverified Password Change in GitHub repository pimcore/admin-ui-classic-bundle prior to 1.2.0.
network
low complexity
pimcore CWE-287
7.2