CM
Product
Customer Management Framework
9
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 6Low 0
Watch
Add Customer Management Framework to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-2629 | 7.8 | May 10 | Improper Neutralization of Formula Elements in a CSV File in pimcore/customer-data-framework Affected: before 3.3.9 |
| CVE-2021-31867 | 7.5 | Aug 4 | Pimcore Customer Data Framework version 3.0.0 and earlier suffers from a Boolean-based blind SQL injection issue in the $id parameter of the SegmentAssignmentController.php… Affected: before 3.0.2 |
| CVE-2023-2756 | 7.2 | May 17 | SQL Injection in pimcore/customer-data-framework Affected: before 3.3.10 |
| CVE-2024-21667 | 6.5 | Jan 11 | Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access GDPR extracts Affected: before 4.0.6 |
| CVE-2024-21666 | 6.5 | Jan 11 | Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access customers duplicates list Affected: before 4.0.6 |
| CVE-2023-3574 | 6.5 | Jul 10 | Improper Authorization in pimcore/customer-data-framework Affected: before 3.4.1 |
| CVE-2023-4145 | 5.4 | Aug 3 | Cross-site Scripting (XSS) - Stored in pimcore/customer-data-framework Affected: before 3.4.2 |
| CVE-2023-2881 | 4.9 | May 25 | Storing Passwords in a Recoverable Format in pimcore/customer-data-framework Affected: before 3.3.10 |
| CVE-2023-32075 | 4.3 | May 11 | Pimcore vulnerable to Business Logic Errors in Customer automation rules Affected: before 3.3.9 |
Showing 9