Login Request a demo
CU
Product
customer-data-framework
by pimcore · last CVE Jan 28, 2025
7
CVEs
0
On KEV
7.2
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 0High 1Medium 6Low 0
Severity
All severities7Critical0High1Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add customer-data-framework to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-11956
7.2
1%
Jan 28
Pimcore customer-data-framework list sql injection
Affected: 4.0; 4.1; 4.2
CVE-2024-21667
6.5
1%
Jan 11
Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access GDPR extracts
Affected: < 4.0.6
CVE-2024-21666
6.5
1%
Jan 11
Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access customers duplicates list
Affected: < 4.0.6
CVE-2023-49076
6.5
0%
Nov 30
Pimcore missing token/header to prevent CSRF
Affected: < 4.0.5
CVE-2023-3574
6.5
1%
Jul 10
Improper Authorization in pimcore/customer-data-framework
Affected: before 3.4.1
CVE-2023-4145
5.4
1%
Aug 3
Cross-site Scripting (XSS) - Stored in pimcore/customer-data-framework
Affected: before 3.4.2
CVE-2023-32075
4.3
1%
May 11
Pimcore vulnerable to Business Logic Errors in Customer automation rules
Affected: < 3.3.9
Showing 7