pimcore admin classic bundle

Name: pimcore admin classic bundle
Brand: pimcore

productUS

cpe:2.3:a:pimcore:admin_classic_bundle:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

2critical4high7medium0low

updated 2026-10-23

vulnerabilities (14)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-49075US	high7.2	1.44% (73rd)	—	1.2.2	2023-11-28	< 1.2.2
CVE-2024-23646US	high8.8	1.00% (62nd)	—	1.3.2	2024-01-24	1.0.0 → 1.3.2
CVE-2024-23648US	high8.8	0.83% (57th)	—	1.2.3	2024-01-24	< 1.2.3
CVE-2024-25625US	critical9.3	0.68% (52nd)	—	1.3.4	2024-02-19	< 1.3.4
CVE-2023-47636US	medium5.3	0.65% (51st)	—	1.2.1	2023-11-15	< 1.2.1
CVE-2023-37280US	medium6.1	0.58% (47th)	—	1.0.3	2023-07-11	< 1.0.3
CVE-2023-5844US	high7.2	0.55% (45th)	—	no fix	2023-10-30	≤ 1.1.4
CVE-2024-24822US	critical9.1OT elevated	0.54% (45th)	—	1.3.3	2024-02-07	< 1.3.3
CVE-2025-24980US	medium5.3	0.52% (43rd)	—	1.7.4.1	2025-02-07	< 1.7.4.1
CVE-2023-46722US	medium6.1	0.50% (42nd)	—	1.2.0	2023-10-31	< 1.2.0
CVE-2024-41109US	medium6.5	0.48% (41st)	—	1.4.6	2024-07-30	3 versions
CVE-2023-42817US	medium5.4	0.38% (31st)	—	1.1.2	2023-09-25	< 1.1.2
CVE-2026-23495US	—	0.36% (29th)	—	1.7.16	2026-01-15	2 versions
CVE-2025-30166US	medium4.8	0.25% (16th)	—	1.7.6	2025-04-08	< 1.7.6

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-204Observable Response Discrepancy1 CVEs
CWE-209Generation of Error Message Containing Sensitive Information1 CVEs
CWE-284Improper Access Control1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-308Use of Single-factor Authentication1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.