CVE Feed

    Dashboard / CVE / CVE-2021-31869

    CVE-2021-31869

    Pimcore AdminBundle version 6.8.0 and earlier suffers from a SQL injection issue in the specificID variable used by the application. This issue was fixed in version 6.9.4 of the product.

    Published:Aug 4, 2021
    Last Modified:Mar 6, 2026
    EPS:Aug 4, 2021
    EPSS Score:0.00007
    CVSS Score:6.5

    Affected Products

    Vendor
    Pimcore
    Product
    Pimcore

    Exploits

    https://www.rapid7.com/blog/post/2021/07/27/multiple-open-source-web-app-vulnerabilities-fixed/https://www.rapid7.com/blog/post/2021/07/27/multiple-open-source-web-app-vulnerabilities-fixed/

    Related CVEs

    CVE-2026-55634 (CVSS 9.9) — Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, the …
    CVE-2026-55220 (CVSS 9.3) — Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, Pimc…
    CVE-2026-44741 (CVSS 8.8) — Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. Versions prior to 2.3.6 and 1.7.18 have a SQ…
    CVE-2026-45704 (CVSS 7.1) — Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.6, CustomRepo…
    CVE-2026-44739 (CVSS 8.7) — Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.6, the column…
    CVE-2026-45260 (CVSS 8.1) — Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.7, Pimcore's …
    CVE-2026-45703 (CVSS 6.4) — Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.7, the WordEx…
    CVE-2026-45162 (CVSS 8) — Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.7, multiple P…
    CVE-2026-55207 (CVSS 8.8) — Pimcore is an Open Source Data & Experience Management Platform. Prior to 2025.4.6 and 2026.1.6, an unauthenti…
    CVE-2026-55208 (CVSS 7.7) — Pimcore Studio Backend Bundle is the backend bundle for Pimcore Studio. Prior to 2025.4.6 and 2026.1.6, an aut…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High