Vendors / aimeos Records 13 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 5
Exploited now aimeos records in CISA KEV No aimeos vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 77
Aimeos 2021.10 LTS contains a SQL injection vulnerability in the json api 'sort' parameter that allows attackers to inject malicious database queries.
CVSS 4.0 HIGH 8.8· Network · No auth · No interaction · EPSS 0.00337 · Published 2026-01-15 · No fix listed CWE-89
Priority LOW 39
ai-client-html is an Aimeos e-commerce HTML client component.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0051 · Published 2024-06-25 · Fixed in 2024.04.7, 2023.10.15 +2 CWE-1295
Priority LOW 35
Aimeos is an Open Source e-commerce framework for online shops.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00607 · Published 2024-06-11 · Fixed in 2024.04.5 CWE-73
Priority LOW 33
The Aimeos GrapesJS CMS extension provides page editor for creating content pages based on extensible components.
CVSS 3.1 HIGH 7.7· Network · High privileges · User interaction · EPSS 0.003 · Published 2025-12-02 · Fixed in 2021.10.8, 2022.10.9 +3 CWE-79
Priority LOW 32
aimeos/ai-admin-graphql is the Aimeos GraphQL API admin interface.
CVSS 3.1 HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00443 · Published 2024-07-02 · Fixed in 2022.10.10, 2023.10.6 +1 CWE-1220
Priority LOW 31
aimeos/ai-controller-frontend is the Aimeos frontend controller package for e-commerce projects.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00485 · Published 2024-09-26 · Fixed in 2023.10.9, 2022.10.8 +3 CWE-639
Priority LOW 25
Aimeos is an e-commerce framework.
CVSS 3.1 MEDIUM 5.5· Network · High privileges · No interaction · EPSS 0.0036 · Published 2024-10-24 · Fixed in 2024.07.2 CWE-270
Priority LOW 25
aimeos/ai-admin-jsonadm is the Aimeos e-commerce JSON API for administrative tasks.
CVSS 3.1 MEDIUM 5.5· Network · High privileges · No interaction · EPSS 0.00481 · Published 2024-07-02 · Fixed in 2023.10.4, 2022.10.3 +3 CWE-863
Priority LOW 25
The Aimeos HTML client provides Aimeos HTML components for e-commerce projects.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0055 · Published 2024-06-11 · Fixed in 2024.04.5, 2023.10.14 +3 CWE-841
Priority LOW 25
Aimeos is an Open Source e-commerce framework for online shops.
CVSS 3.1 MEDIUM 5.5· Network · High privileges · No interaction · EPSS 0.00435 · Published 2024-06-11 · Fixed in 2024.04.7, 2023.10.17 +1 CWE-270
Priority LOW 24
aimeos/ai-controller-frontend is the Aimeos frontend controller.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0043 · Published 2024-07-02 · Fixed in 2023.10.9, 2022.10.8 +2 CWE-841
Priority LOW 18
aimeos/ai-admin-graphql is the Aimeos GraphQL API admin interface.
CVSS 3.1 LOW 3.8· Network · High privileges · No interaction · EPSS 0.00428 · Published 2024-07-02 · Fixed in 2022.10.10, 2023.10.6 +1 CWE-1220
Priority LOW 14
In the Aimeos Pagible content management system prior to version 0.10.4, the administrative proxy route (`cmsproxy`) is vulnerable to a Server-Side Request Forgery (SSRF) attack via DNS Rebinding.
CVSS 3.1 LOW 3.0· Network · Low privileges · User interaction · EPSS 0.00169 · Published 2026-08-12 · Fixed in 0.10.4 CWE-367
Open these records in search → All records by CVSS severity
0 5 6 2 0
THREATIST.IORead the docs