CM
Product
Customer Management Framework
9
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 6Low 0
Watch
Add Customer Management Framework to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-21667 | 6.5 | Jan 11 | Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access GDPR extracts Affected: before 4.0.6 |
| CVE-2024-21666 | 6.5 | Jan 11 | Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access customers duplicates list Affected: before 4.0.6 |
| CVE-2023-3574 | 6.5 | Jul 10 | Improper Authorization in pimcore/customer-data-framework Affected: before 3.4.1 |
| CVE-2023-4145 | 5.4 | Aug 3 | Cross-site Scripting (XSS) - Stored in pimcore/customer-data-framework Affected: before 3.4.2 |
| CVE-2023-2881 | 4.9 | May 25 | Storing Passwords in a Recoverable Format in pimcore/customer-data-framework Affected: before 3.3.10 |
| CVE-2023-32075 | 4.3 | May 11 | Pimcore vulnerable to Business Logic Errors in Customer automation rules Affected: before 3.3.9 |
Showing 6