Vulnerabilities > Pimcore > High

DATE CVE VULNERABILITY TITLE RISK
2023-05-30 CVE-2023-2984 Path Traversal: '..filename' vulnerability in Pimcore
Path Traversal: '\..\filename' in GitHub repository pimcore/pimcore prior to 10.5.22.
network
low complexity
pimcore CWE-29
8.8
2023-05-17 CVE-2023-2756 SQL Injection vulnerability in Pimcore Customer Management Framework
SQL Injection in GitHub repository pimcore/customer-data-framework prior to 3.3.10.
network
low complexity
pimcore CWE-89
7.2
2023-05-10 CVE-2023-2629 Improper Neutralization of Formula Elements in a CSV File vulnerability in Pimcore Customer Management Framework
Improper Neutralization of Formula Elements in a CSV File in GitHub repository pimcore/customer-data-framework prior to 3.3.9.
local
low complexity
pimcore CWE-1236
7.8
2023-05-08 CVE-2023-30855 Path Traversal vulnerability in Pimcore
Pimcore is an open source data and experience management platform.
network
low complexity
pimcore CWE-22
7.5
2023-04-27 CVE-2023-30850 SQL Injection vulnerability in Pimcore
Pimcore is an open source data and experience management platform.
network
low complexity
pimcore CWE-89
8.8
2023-04-27 CVE-2023-30848 SQL Injection vulnerability in Pimcore
Pimcore is an open source data and experience management platform.
network
low complexity
pimcore CWE-89
8.8
2023-04-27 CVE-2023-30849 SQL Injection vulnerability in Pimcore
Pimcore is an open source data and experience management platform.
network
low complexity
pimcore CWE-89
8.8
2023-04-27 CVE-2023-2338 SQL Injection vulnerability in Pimcore
SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.21.
network
low complexity
pimcore CWE-89
8.8
2023-03-22 CVE-2023-28438 SQL Injection vulnerability in Pimcore
Pimcore is an open source data and experience management platform.
network
low complexity
pimcore CWE-89
8.0
2023-03-22 CVE-2023-1578 SQL Injection vulnerability in Pimcore
SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.19.
network
low complexity
pimcore CWE-89
8.8