How many pimcore pimcore/pimcore CVEs are in CISA KEV?

None of pimcore pimcore/pimcore's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of pimcore pimcore/pimcore are affected?

128 distinct pimcore pimcore/pimcore versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in pimcore pimcore/pimcore CVEs?

pimcore pimcore/pimcore's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-502 (Deserialization of Untrusted Data).

How many critical pimcore pimcore/pimcore vulnerabilities are there?

pimcore pimcore/pimcore has 6 critical and 46 high-severity CVEs.

What is the average severity of pimcore pimcore/pimcore CVEs?

The average CVSS base score across pimcore pimcore/pimcore's scored CVEs is 6.7.

pimcore pimcore/pimcore Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: pimcore pimcore/pimcore vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

pimcore pimcore/pimcore Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

pimcore pimcore/pimcore has 130 published CVE records since 2014, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 102 have a known public exploit. The average CVSS base score across scored CVEs is 6.7.

Severity and exploitation

How the CVSS severity of pimcore pimcore/pimcore's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical6

High46

Medium78

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of pimcore pimcore/pimcore's CVEs are currently listed in CISA's KEV catalog.

Public exploits

102

102 of pimcore pimcore/pimcore's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every pimcore pimcore/pimcore version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 10.5.2121 CVEs
< 10.5.1910 CVEs
< 10.2.96 CVEs
< 11.5.176 CVEs
< 10.4.05 CVEs
< 10.5.185 CVEs
< 10.2.64 CVEs
< 10.2.74 CVEs
< 10.5.204 CVEs
< 10.6.44 CVEs
12.0.0-RC1 <= v < 12.3.74 CVEs
2026.1.0 <= v < 2026.1.34 CVEs

Common weakness types

The CWE weakness categories most often found in pimcore pimcore/pimcore CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many pimcore pimcore/pimcore CVEs were published each year.

2014

2018

2019

2020

2021

2022

2023

Other pimcore products

Browse vulnerabilities for other products by pimcore.

pimcore148 CVEs admin-ui-classic-bundle16 CVEs pimcore/admin-ui-classic-bundle15 CVEs admin classic bundle14 CVEs customer-data-framework11 CVEs customer management framework9 CVEs pimcore/customer-management-framework-bundle9 CVEs

Frequently asked questions

Common questions about pimcore pimcore/pimcore vulnerabilities.

How many CVEs does pimcore pimcore/pimcore have?: pimcore pimcore/pimcore has 130 published CVE records since 2014.
How many pimcore pimcore/pimcore CVEs are in CISA KEV?: None of pimcore pimcore/pimcore's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for pimcore pimcore/pimcore vulnerabilities?: Yes — 102 of pimcore pimcore/pimcore's CVEs have a known public exploit.
Which versions of pimcore pimcore/pimcore are affected?: 128 distinct pimcore pimcore/pimcore versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in pimcore pimcore/pimcore CVEs?: pimcore pimcore/pimcore's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-502 (Deserialization of Untrusted Data).
How many critical pimcore pimcore/pimcore vulnerabilities are there?: pimcore pimcore/pimcore has 6 critical and 46 high-severity CVEs.
What is the average severity of pimcore pimcore/pimcore CVEs?: The average CVSS base score across pimcore pimcore/pimcore's scored CVEs is 6.7.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track pimcore pimcore/pimcore vulnerabilities

Get an alert for each new pimcore pimcore/pimcore CVE, with AI-written analysis and remediation steps.

Create an account See pricing