Read the docs
TI-2017-14356 Aliases CVE-2017-1000009GHSA-q8cr-xphm-7gfv

Akeneo PIM CE and EE <1.6.6, <1.5.15, <1.4.28 are vulnerable to shell injection in the…

Priority MEDIUM 49CWE-78Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub. Impact type from CWE-78.

Summary

Akeneo PIM CE and EE <1.6.6, <1.5.15, <1.4.28 are vulnerable to shell injection in the mass edition, resulting in remote execution.

Why it matters now

EPSS 0.03932 90th percentileScored 2026-11-07
Fix Fixed akeneo/pim-community-dev (Packagist): 1.4.28, 1.5.15, 1.6.6

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
—akeneo/pim-community-dev (Packagist)1.4 to before 1.4.281.4.28Patch availableGHSA-q8cr-xphm-7gfv
—akeneo/pim-community-dev (Packagist)1.5 to before 1.5.151.5.15Patch availableGHSA-q8cr-xphm-7gfv
—akeneo/pim-community-dev (Packagist)1.6 to before 1.6.61.6.6Patch availableGHSA-q8cr-xphm-7gfv
  • — Vendor— Affected all versions Fixed in — No fix listed CNA
  • akeneo/pim-community-dev (Packagist) Vendor— Affected 1.4 to before 1.4.28 Fixed in 1.4.28 Patch available GHSA-q8cr-xphm-7gfv
  • akeneo/pim-community-dev (Packagist) Vendor— Affected 1.5 to before 1.5.15 Fixed in 1.5.15 Patch available GHSA-q8cr-xphm-7gfv
  • akeneo/pim-community-dev (Packagist) Vendor— Affected 1.6 to before 1.6.6 Fixed in 1.6.6 Patch available GHSA-q8cr-xphm-7gfv

CPE configurations NVD · 118

CPEVersionsRoleVendor
cpe:2.3:a:akeneo:product_information_management:1.4.0:-:*:*:enterprise:*:*:*1.4.0Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.0:beta1:*:*:enterprise:*:*:*1.4.0 beta1Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.0:beta2:*:*:enterprise:*:*:*1.4.0 beta2Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.0:beta3:*:*:enterprise:*:*:*1.4.0 beta3Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.0:rc1:*:*:enterprise:*:*:*1.4.0 rc1Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.1:*:*:*:enterprise:*:*:*1.4.1Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.2:*:*:*:enterprise:*:*:*1.4.2Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.3:*:*:*:enterprise:*:*:*1.4.3Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.4:*:*:*:enterprise:*:*:*1.4.4Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.5:*:*:*:enterprise:*:*:*1.4.5Vulnerableakeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.0:-:*:*:enterprise:*:*:* Versions 1.4.0 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.0:beta1:*:*:enterprise:*:*:* Versions 1.4.0 beta1 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.0:beta2:*:*:enterprise:*:*:* Versions 1.4.0 beta2 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.0:beta3:*:*:enterprise:*:*:* Versions 1.4.0 beta3 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.0:rc1:*:*:enterprise:*:*:* Versions 1.4.0 rc1 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.1:*:*:*:enterprise:*:*:* Versions 1.4.1 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.2:*:*:*:enterprise:*:*:* Versions 1.4.2 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.3:*:*:*:enterprise:*:*:* Versions 1.4.3 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.4:*:*:*:enterprise:*:*:* Versions 1.4.4 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.5:*:*:*:enterprise:*:*:* Versions 1.4.5 Vulnerable ·akeneo
Show 108 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:akeneo:product_information_management:1.4.6:*:*:*:enterprise:*:*:*1.4.6Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.7:*:*:*:enterprise:*:*:*1.4.7Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.8:*:*:*:enterprise:*:*:*1.4.8Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.9:*:*:*:enterprise:*:*:*1.4.9Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.10:*:*:*:enterprise:*:*:*1.4.10Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.11:*:*:*:enterprise:*:*:*1.4.11Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.12:*:*:*:enterprise:*:*:*1.4.12Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.13:*:*:*:enterprise:*:*:*1.4.13Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.14:*:*:*:enterprise:*:*:*1.4.14Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.15:*:*:*:enterprise:*:*:*1.4.15Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.16:*:*:*:enterprise:*:*:*1.4.16Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.17:*:*:*:enterprise:*:*:*1.4.17Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.18:*:*:*:enterprise:*:*:*1.4.18Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.19:*:*:*:enterprise:*:*:*1.4.19Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.20:*:*:*:enterprise:*:*:*1.4.20Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.21:*:*:*:enterprise:*:*:*1.4.21Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.22:*:*:*:enterprise:*:*:*1.4.22Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.23:*:*:*:enterprise:*:*:*1.4.23Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.24:*:*:*:enterprise:*:*:*1.4.24Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.25:*:*:*:enterprise:*:*:*1.4.25Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.26:*:*:*:enterprise:*:*:*1.4.26Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.27:*:*:*:enterprise:*:*:*1.4.27Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.0:-:*:*:enterprise:*:*:*1.5.0Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.0:alpha1:*:*:enterprise:*:*:*1.5.0 alpha1Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.0:beta1:*:*:enterprise:*:*:*1.5.0 beta1Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.0:rc1:*:*:enterprise:*:*:*1.5.0 rc1Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.1:*:*:*:enterprise:*:*:*1.5.1Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.2:*:*:*:enterprise:*:*:*1.5.2Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.3:*:*:*:enterprise:*:*:*1.5.3Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.4:*:*:*:enterprise:*:*:*1.5.4Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.5:*:*:*:enterprise:*:*:*1.5.5Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.6:*:*:*:enterprise:*:*:*1.5.6Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.7:*:*:*:enterprise:*:*:*1.5.7Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.8:*:*:*:enterprise:*:*:*1.5.8Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.9:*:*:*:enterprise:*:*:*1.5.9Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.10:*:*:*:enterprise:*:*:*1.5.10Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.11:*:*:*:enterprise:*:*:*1.5.11Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.12:*:*:*:enterprise:*:*:*1.5.12Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.13:*:*:*:enterprise:*:*:*1.5.13Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.14:*:*:*:enterprise:*:*:*1.5.14Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.6.0:-:*:*:enterprise:*:*:*1.6.0Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.6.0:alpha1:*:*:enterprise:*:*:*1.6.0 alpha1Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.6.0:alpha2:*:*:enterprise:*:*:*1.6.0 alpha2Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.6.0:rc1:*:*:enterprise:*:*:*1.6.0 rc1Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.6.1:*:*:*:enterprise:*:*:*1.6.1Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.6.2:*:*:*:enterprise:*:*:*1.6.2Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.6.3:*:*:*:enterprise:*:*:*1.6.3Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.6.4:*:*:*:enterprise:*:*:*1.6.4Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.6.5:*:*:*:enterprise:*:*:*1.6.5Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.0:-:*:*:community:*:*:*1.4.0Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.0:beta1:*:*:community:*:*:*1.4.0 beta1Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.0:beta2:*:*:community:*:*:*1.4.0 beta2Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.0:beta3:*:*:community:*:*:*1.4.0 beta3Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.0:rc1:*:*:community:*:*:*1.4.0 rc1Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.1:*:*:*:community:*:*:*1.4.1Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.2:*:*:*:community:*:*:*1.4.2Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.3:*:*:*:community:*:*:*1.4.3Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.4:*:*:*:community:*:*:*1.4.4Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.5:*:*:*:community:*:*:*1.4.5Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.6:*:*:*:community:*:*:*1.4.6Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.7:*:*:*:community:*:*:*1.4.7Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.8:*:*:*:community:*:*:*1.4.8Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.9:*:*:*:community:*:*:*1.4.9Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.10:*:*:*:community:*:*:*1.4.10Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.11:*:*:*:community:*:*:*1.4.11Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.12:*:*:*:community:*:*:*1.4.12Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.13:*:*:*:community:*:*:*1.4.13Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.14:*:*:*:community:*:*:*1.4.14Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.15:*:*:*:community:*:*:*1.4.15Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.16:*:*:*:community:*:*:*1.4.16Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.17:*:*:*:community:*:*:*1.4.17Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.18:*:*:*:community:*:*:*1.4.18Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.19:*:*:*:community:*:*:*1.4.19Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.20:*:*:*:community:*:*:*1.4.20Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.21:*:*:*:community:*:*:*1.4.21Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.22:*:*:*:community:*:*:*1.4.22Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.23:*:*:*:community:*:*:*1.4.23Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.24:*:*:*:community:*:*:*1.4.24Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.25:*:*:*:community:*:*:*1.4.25Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.26:*:*:*:community:*:*:*1.4.26Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.4.27:*:*:*:community:*:*:*1.4.27Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.0:-:*:*:community:*:*:*1.5.0Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.0:alpha1:*:*:community:*:*:*1.5.0 alpha1Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.0:beta1:*:*:community:*:*:*1.5.0 beta1Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.0:rc1:*:*:community:*:*:*1.5.0 rc1Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.1:*:*:*:community:*:*:*1.5.1Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.2:*:*:*:community:*:*:*1.5.2Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.3:*:*:*:community:*:*:*1.5.3Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.4:*:*:*:community:*:*:*1.5.4Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.5:*:*:*:community:*:*:*1.5.5Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.6:*:*:*:community:*:*:*1.5.6Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.7:*:*:*:community:*:*:*1.5.7Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.8:*:*:*:community:*:*:*1.5.8Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.9:*:*:*:community:*:*:*1.5.9Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.10:*:*:*:community:*:*:*1.5.10Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.11:*:*:*:community:*:*:*1.5.11Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.12:*:*:*:community:*:*:*1.5.12Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.13:*:*:*:community:*:*:*1.5.13Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.5.14:*:*:*:community:*:*:*1.5.14Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.6.0:-:*:*:community:*:*:*1.6.0Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.6.0:alpha1:*:*:community:*:*:*1.6.0 alpha1Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.6.0:alpha2:*:*:community:*:*:*1.6.0 alpha2Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.6.0:rc1:*:*:community:*:*:*1.6.0 rc1Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.6.1:*:*:*:community:*:*:*1.6.1Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.6.2:*:*:*:community:*:*:*1.6.2Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.6.3:*:*:*:community:*:*:*1.6.3Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.6.4:*:*:*:community:*:*:*1.6.4Vulnerableakeneo
cpe:2.3:a:akeneo:product_information_management:1.6.5:*:*:*:community:*:*:*1.6.5Vulnerableakeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.6:*:*:*:enterprise:*:*:* Versions 1.4.6 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.7:*:*:*:enterprise:*:*:* Versions 1.4.7 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.8:*:*:*:enterprise:*:*:* Versions 1.4.8 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.9:*:*:*:enterprise:*:*:* Versions 1.4.9 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.10:*:*:*:enterprise:*:*:* Versions 1.4.10 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.11:*:*:*:enterprise:*:*:* Versions 1.4.11 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.12:*:*:*:enterprise:*:*:* Versions 1.4.12 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.13:*:*:*:enterprise:*:*:* Versions 1.4.13 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.14:*:*:*:enterprise:*:*:* Versions 1.4.14 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.15:*:*:*:enterprise:*:*:* Versions 1.4.15 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.16:*:*:*:enterprise:*:*:* Versions 1.4.16 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.17:*:*:*:enterprise:*:*:* Versions 1.4.17 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.18:*:*:*:enterprise:*:*:* Versions 1.4.18 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.19:*:*:*:enterprise:*:*:* Versions 1.4.19 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.20:*:*:*:enterprise:*:*:* Versions 1.4.20 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.21:*:*:*:enterprise:*:*:* Versions 1.4.21 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.22:*:*:*:enterprise:*:*:* Versions 1.4.22 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.23:*:*:*:enterprise:*:*:* Versions 1.4.23 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.24:*:*:*:enterprise:*:*:* Versions 1.4.24 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.25:*:*:*:enterprise:*:*:* Versions 1.4.25 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.26:*:*:*:enterprise:*:*:* Versions 1.4.26 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.27:*:*:*:enterprise:*:*:* Versions 1.4.27 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.0:-:*:*:enterprise:*:*:* Versions 1.5.0 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.0:alpha1:*:*:enterprise:*:*:* Versions 1.5.0 alpha1 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.0:beta1:*:*:enterprise:*:*:* Versions 1.5.0 beta1 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.0:rc1:*:*:enterprise:*:*:* Versions 1.5.0 rc1 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.1:*:*:*:enterprise:*:*:* Versions 1.5.1 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.2:*:*:*:enterprise:*:*:* Versions 1.5.2 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.3:*:*:*:enterprise:*:*:* Versions 1.5.3 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.4:*:*:*:enterprise:*:*:* Versions 1.5.4 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.5:*:*:*:enterprise:*:*:* Versions 1.5.5 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.6:*:*:*:enterprise:*:*:* Versions 1.5.6 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.7:*:*:*:enterprise:*:*:* Versions 1.5.7 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.8:*:*:*:enterprise:*:*:* Versions 1.5.8 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.9:*:*:*:enterprise:*:*:* Versions 1.5.9 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.10:*:*:*:enterprise:*:*:* Versions 1.5.10 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.11:*:*:*:enterprise:*:*:* Versions 1.5.11 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.12:*:*:*:enterprise:*:*:* Versions 1.5.12 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.13:*:*:*:enterprise:*:*:* Versions 1.5.13 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.14:*:*:*:enterprise:*:*:* Versions 1.5.14 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.6.0:-:*:*:enterprise:*:*:* Versions 1.6.0 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.6.0:alpha1:*:*:enterprise:*:*:* Versions 1.6.0 alpha1 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.6.0:alpha2:*:*:enterprise:*:*:* Versions 1.6.0 alpha2 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.6.0:rc1:*:*:enterprise:*:*:* Versions 1.6.0 rc1 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.6.1:*:*:*:enterprise:*:*:* Versions 1.6.1 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.6.2:*:*:*:enterprise:*:*:* Versions 1.6.2 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.6.3:*:*:*:enterprise:*:*:* Versions 1.6.3 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.6.4:*:*:*:enterprise:*:*:* Versions 1.6.4 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.6.5:*:*:*:enterprise:*:*:* Versions 1.6.5 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.0:-:*:*:community:*:*:* Versions 1.4.0 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.0:beta1:*:*:community:*:*:* Versions 1.4.0 beta1 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.0:beta2:*:*:community:*:*:* Versions 1.4.0 beta2 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.0:beta3:*:*:community:*:*:* Versions 1.4.0 beta3 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.0:rc1:*:*:community:*:*:* Versions 1.4.0 rc1 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.1:*:*:*:community:*:*:* Versions 1.4.1 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.2:*:*:*:community:*:*:* Versions 1.4.2 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.3:*:*:*:community:*:*:* Versions 1.4.3 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.4:*:*:*:community:*:*:* Versions 1.4.4 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.5:*:*:*:community:*:*:* Versions 1.4.5 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.6:*:*:*:community:*:*:* Versions 1.4.6 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.7:*:*:*:community:*:*:* Versions 1.4.7 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.8:*:*:*:community:*:*:* Versions 1.4.8 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.9:*:*:*:community:*:*:* Versions 1.4.9 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.10:*:*:*:community:*:*:* Versions 1.4.10 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.11:*:*:*:community:*:*:* Versions 1.4.11 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.12:*:*:*:community:*:*:* Versions 1.4.12 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.13:*:*:*:community:*:*:* Versions 1.4.13 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.14:*:*:*:community:*:*:* Versions 1.4.14 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.15:*:*:*:community:*:*:* Versions 1.4.15 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.16:*:*:*:community:*:*:* Versions 1.4.16 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.17:*:*:*:community:*:*:* Versions 1.4.17 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.18:*:*:*:community:*:*:* Versions 1.4.18 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.19:*:*:*:community:*:*:* Versions 1.4.19 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.20:*:*:*:community:*:*:* Versions 1.4.20 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.21:*:*:*:community:*:*:* Versions 1.4.21 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.22:*:*:*:community:*:*:* Versions 1.4.22 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.23:*:*:*:community:*:*:* Versions 1.4.23 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.24:*:*:*:community:*:*:* Versions 1.4.24 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.25:*:*:*:community:*:*:* Versions 1.4.25 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.26:*:*:*:community:*:*:* Versions 1.4.26 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.4.27:*:*:*:community:*:*:* Versions 1.4.27 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.0:-:*:*:community:*:*:* Versions 1.5.0 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.0:alpha1:*:*:community:*:*:* Versions 1.5.0 alpha1 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.0:beta1:*:*:community:*:*:* Versions 1.5.0 beta1 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.0:rc1:*:*:community:*:*:* Versions 1.5.0 rc1 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.1:*:*:*:community:*:*:* Versions 1.5.1 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.2:*:*:*:community:*:*:* Versions 1.5.2 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.3:*:*:*:community:*:*:* Versions 1.5.3 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.4:*:*:*:community:*:*:* Versions 1.5.4 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.5:*:*:*:community:*:*:* Versions 1.5.5 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.6:*:*:*:community:*:*:* Versions 1.5.6 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.7:*:*:*:community:*:*:* Versions 1.5.7 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.8:*:*:*:community:*:*:* Versions 1.5.8 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.9:*:*:*:community:*:*:* Versions 1.5.9 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.10:*:*:*:community:*:*:* Versions 1.5.10 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.11:*:*:*:community:*:*:* Versions 1.5.11 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.12:*:*:*:community:*:*:* Versions 1.5.12 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.13:*:*:*:community:*:*:* Versions 1.5.13 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.5.14:*:*:*:community:*:*:* Versions 1.5.14 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.6.0:-:*:*:community:*:*:* Versions 1.6.0 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.6.0:alpha1:*:*:community:*:*:* Versions 1.6.0 alpha1 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.6.0:alpha2:*:*:community:*:*:* Versions 1.6.0 alpha2 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.6.0:rc1:*:*:community:*:*:* Versions 1.6.0 rc1 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.6.1:*:*:*:community:*:*:* Versions 1.6.1 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.6.2:*:*:*:community:*:*:* Versions 1.6.2 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.6.3:*:*:*:community:*:*:* Versions 1.6.3 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.6.4:*:*:*:community:*:*:* Versions 1.6.4 Vulnerable ·akeneo
  • cpe:2.3:a:akeneo:product_information_management:1.6.5:*:*:*:community:*:*:* Versions 1.6.5 Vulnerable ·akeneo

Remediation

  • Fix · GHSA-q8cr-xphm-7gfv akeneo/pim-community-dev (Packagist) Fixed in 1.4.28 Advisory →
  • Fix · GHSA-q8cr-xphm-7gfv akeneo/pim-community-dev (Packagist) Fixed in 1.5.15 Advisory →
  • Fix · GHSA-q8cr-xphm-7gfv akeneo/pim-community-dev (Packagist) Fixed in 1.6.6 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-1000009
  2. 2026-10-03 Alias added: GHSA-q8cr-xphm-7gfv

References

Patch 3

Advisory 1

Other 1

  • TI-2022-22801 Remote php code execution in Akeneo PIM CVSS 3.1HIGH 8.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences