Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2635▼ 214 respecto a la semana anterior

Críticas / altas1385▲ 153 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)56▼ 473 respecto a la semana anterior

9 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2024-21667	Modificada	Media (6.5)	0.59%	—	Pimcore Customer Management Framework	11/1/2024	17/6/2026	pimcore/customer-data-framework is the Customer Management Framework for management of customer data within Pimcore. An authenticated and unauthorized user can access the GDPR data extraction feature and query over the information returned, leading to customer data exposure. Permissions are not enforced when reaching…
CVE-2024-21666	Modificada	Media (6.5)	0.56%	—	Pimcore Customer Management Framework	11/1/2024	17/6/2026	The Customer Management Framework (CMF) for Pimcore adds functionality for customer data management, segmentation, personalization and marketing automation. An authenticated and unauthorized user can access the list of potential duplicate users and see their data. Permissions are enforced when reaching the…
CVE-2023-4145	Analizada	Media (5.4)	0.61%	—	Pimcore Customer Management Framework	3/8/2023	17/6/2026	Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/customer-data-framework prior to 3.4.2.
CVE-2023-3574	Modificada	Media (6.5)	0.54%	—	Pimcore Customer Management Framework	10/7/2023	17/6/2026	Improper Authorization in GitHub repository pimcore/customer-data-framework prior to 3.4.1.
CVE-2023-2881	Analizada	Media (4.9)	0.55%	—	Pimcore Customer Management Framework	25/5/2023	17/6/2026	Storing Passwords in a Recoverable Format in GitHub repository pimcore/customer-data-framework prior to 3.3.10.
CVE-2023-2756	Modificada	Alta (7.2)	0.94%	—	Pimcore Customer Management Framework	17/5/2023	17/6/2026	SQL Injection in GitHub repository pimcore/customer-data-framework prior to 3.3.10.
CVE-2023-32075	Modificada	Media (4.3)	0.76%	—	Pimcore Customer Management Framework	11/5/2023	17/6/2026	The Customer Management Framework (CMF) for Pimcore adds functionality for customer data management. In `pimcore/customer-management-framework-bundle` prior to version 3.3.9, business logic errors are possible in the `Conditions` tab since the counter can be a negative number. This vulnerability is capable of the…
CVE-2023-2629	Modificada	Alta (7.8)	0.41%	—	Pimcore Customer Management Framework	10/5/2023	17/6/2026	Improper Neutralization of Formula Elements in a CSV File in GitHub repository pimcore/customer-data-framework prior to 3.3.9.
CVE-2021-31867	Modificada	Alta (7.5)	1.2%	—	Pimcore Customer Management Framework	4/8/2021	17/6/2026	Pimcore Customer Data Framework version 3.0.0 and earlier suffers from a Boolean-based blind SQL injection issue in the $id parameter of the SegmentAssignmentController.php component of the application. This issue was fixed in version 3.0.2 of the product.