pimcore

Records172All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high62CVSS 7.0–8.9

Exploited now

pimcore records in CISA KEV

No pimcore vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pimcore 127 records HIGH Admin Classic Bundle 14 records HIGH Customer Management Framework 9 records HIGH Core 1 record MEDIUM Data-hub 1 record LOW E-commerce Framework 1 record LOW Perspective Editor 1 record LOW Web2print Tools 1 record MEDIUM

Records

1 record in E-commerce Framework · all components

TI-2024-14386 CVE-2024-21665 · GHSA-cx99-25hr-5jxf

Pimcore Ecommerce Framework Bundle Improper Access Control allows unprivileged user to access back-office orders list

LOW 21

ecommerce-framework-bundle is the Pimcore Ecommerce Framework Bundle.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0049 Published 2024-01-11 Fixed in 1.0.10 CWE-284

Open these records in search →