VendorsPimcoreadmin_classic_bundleall versions
Vulnerabilities

Pimcore Admin Classic Bundle

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

14CVEs
CVE-2024-25625
Pimcore Host Header Injection in user invitation link
Published 2024-02-19 · Analyzed
9.3EPSS 0.007
CVE-2024-24822
Pimcore Admin Classic Bundle permissions are not getting checked when working with tags
Published 2024-02-07 · Modified
9.1EPSS 0.005
CVE-2024-23646
Pimcore Admin Classic Bundle SQL Injection in Admin download files as zip
Published 2024-01-24 · Modified
8.8EPSS 0.010
CVE-2024-23648
Pimcore Admin Classic Bundle host header injection in the password reset
Published 2024-01-24 · Modified
8.8EPSS 0.008
CVE-2023-49075
Pimcore Admin UI has Two Factor Authentication disabled for non admin security firewalls
Published 2023-11-28 · Modified
8.4EPSS 0.014
CVE-2023-5844
Unverified Password Change in pimcore/admin-ui-classic-bundle
Published 2023-10-30 · Analyzed
7.2EPSS 0.006
CVE-2025-24980
Pimcore Admin Classic Bundle allows user enumeration
Published 2025-02-07 · Modified
6.9EPSS 0.005
CVE-2024-41109
Pimcore vulnerable to disclosure of system and database information behind /admin firewall
Published 2024-07-30 · Analyzed
6.5EPSS 0.005
CVE-2023-37280
Pimcore admin UI vulnerable to Cross-site Scripting in two factor authentication setup page
Published 2023-07-11 · Modified
6.1EPSS 0.006
CVE-2023-46722
Pimcore Admin Classic Bundle Cross-site Scripting (XSS) in PDF previews
Published 2023-10-31 · Modified
6.1EPSS 0.005
CVE-2023-42817
Cross-site Scripting (XSS) in pimcore admin-ui-classic-bundle translations
Published 2023-09-25 · Modified
5.4EPSS 0.003
CVE-2023-47636
Full Path Disclosure via re-export document in pimcore/admin-ui-classic-bundle
Published 2023-11-15 · Modified
5.3EPSS 0.007
CVE-2025-30166
Pimcore's Admin Classic Bundle allows HTML Injection
Published 2025-04-08 · Analyzed
4.8EPSS 0.002
CVE-2026-23495
Pimcore's Admin Classic Bundle is Missing Function Level Authorization on "Predefined Properties" Listing
Published 2026-01-15 · Analyzed
4.3EPSS 0.004