Pimcore admin-ui-classic-bundle

• CVE-2025-30166 Low 1.8 Pimcore's Admin Classic Bundle allows HTML Injection 0.3%
• CVE-2025-24980 Medium 6.9 Pimcore Admin Classic Bundle allows user enumeration 0.5%
• CVE-2024-41109 Medium 6.3 Pimcore vulnerable to disclosure of system and database information behind /admin firewall 0.5%
• CVE-2024-25625 High 8.1 Pimcore Host Header Injection in user invitation link 0.7%
• CVE-2024-24822 Medium 6.5 Pimcore Admin Classic Bundle permissions are not getting checked when working with tags 0.5%
• CVE-2024-23646 High 8.8 Pimcore Admin Classic Bundle SQL Injection in Admin download files as zip 1.0%
• CVE-2024-23648 High 8.8 Pimcore Admin Classic Bundle host header injection in the password reset 0.8%
• CVE-2023-49075 High 8.5 Pimcore Admin UI has Two Factor Authentication disabled for non admin security firewalls 1.4%
• CVE-2023-47636 Medium 5.3 Full Path Disclosure via re-export document in pimcore/admin-ui-classic-bundle 0.7%
• CVE-2023-46722 Medium 6.1 Pimcore Admin Classic Bundle Cross-site Scripting (XSS) in PDF previews 0.6%
• CVE-2023-42817 Medium 5.4 Cross-site Scripting (XSS) in pimcore admin-ui-classic-bundle translations 0.4%
• CVE-2023-37280 Medium 5.0 Pimcore admin UI vulnerable to Cross-site Scripting in two factor authentication setup page 0.6%