How many pimcore pimcore/customer-data-framework CVEs are in CISA KEV?

None of pimcore pimcore/customer-data-framework's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of pimcore pimcore/customer-data-framework are affected?

8 distinct pimcore pimcore/customer-data-framework versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in pimcore pimcore/customer-data-framework CVEs?

pimcore pimcore/customer-data-framework's CVEs most often map to these CWE weakness types: CWE-1236 (Improper Neutralization of Formula Elements in a CSV File), CWE-257 (Storing Passwords in a Recoverable Format), CWE-285 (Improper Authorization), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).

What is the average severity of pimcore pimcore/customer-data-framework CVEs?

The average CVSS base score across pimcore pimcore/customer-data-framework's scored CVEs is 6.4.

pimcore pimcore/customer-data-framework Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: pimcore pimcore/customer-data-framework vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Overview

pimcore pimcore/customer-data-framework has 5 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 4 have a known public exploit. The average CVSS base score across scored CVEs is 6.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting pimcore pimcore/customer-data-framework, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of pimcore pimcore/customer-data-framework's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High2

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of pimcore pimcore/customer-data-framework's CVEs are currently listed in CISA's KEV catalog.

Public exploits

4

4 of pimcore pimcore/customer-data-framework's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every pimcore pimcore/customer-data-framework version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 3.3.102 CVEs
< 3.3.91 CVE
< 3.4.11 CVE
< 3.4.21 CVE

Fixed in

3.3.102 CVEs
3.3.91 CVE
3.4.11 CVE
3.4.21 CVE

Find a version

5 CVEs

Sort

Medium vulnerability · 2023-08-03
CVE-2023-4145
Public exploit
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.6% (47th pct)2023-08-03
Medium vulnerability · 2023-07-10
CVE-2023-3574
Public exploit
Patch
CWE-285
Medium · CVSS 6.5
EPSS 0.5% (43th pct)2023-07-10
Storing Passwords in a Recoverable Format in pimcore/customer-data-framework
CVE-2023-2881
Patch
CWE-257
Medium · CVSS 4.9
EPSS 0.5% (44th pct)2023-05-25
High vulnerability · 2023-05-17
CVE-2023-2756
Public exploit
Patch
CWE-89
High · CVSS 7.2
EPSS 0.9% (58th pct)2023-05-17
High vulnerability · 2023-05-10
CVE-2023-2629
Public exploit
Patch
CWE-1236
High · CVSS 7.8
EPSS 0.4% (34th pct)2023-05-10

Common weakness types

The CWE weakness categories most often found in pimcore pimcore/customer-data-framework CVEs. Follow any weakness for its full explanation.

Other pimcore products

Browse vulnerabilities for other products by pimcore.

pimcore146 CVEs pimcore/pimcore129 CVEs admin-ui-classic-bundle16 CVEs pimcore/admin-ui-classic-bundle15 CVEs admin classic bundle14 CVEs customer-data-framework11 CVEs customer management framework9 CVEs

Frequently asked questions

Common questions about pimcore pimcore/customer-data-framework vulnerabilities.

How many CVEs does pimcore pimcore/customer-data-framework have?: pimcore pimcore/customer-data-framework has 5 published CVE records since 2023.
How many pimcore pimcore/customer-data-framework CVEs are in CISA KEV?: None of pimcore pimcore/customer-data-framework's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for pimcore pimcore/customer-data-framework vulnerabilities?: Yes — 4 of pimcore pimcore/customer-data-framework's CVEs have a known public exploit.
Which versions of pimcore pimcore/customer-data-framework are affected?: 8 distinct pimcore pimcore/customer-data-framework versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in pimcore pimcore/customer-data-framework CVEs?: pimcore pimcore/customer-data-framework's CVEs most often map to these CWE weakness types: CWE-1236 (Improper Neutralization of Formula Elements in a CSV File), CWE-257 (Storing Passwords in a Recoverable Format), CWE-285 (Improper Authorization), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).
What is the average severity of pimcore pimcore/customer-data-framework CVEs?: The average CVSS base score across pimcore pimcore/customer-data-framework's scored CVEs is 6.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.