Product Information Management

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-46157 PHP HIGH POC PATCH This Week

Akeneo PIM is an open source Product Information Management (PIM). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Apache PHP Code Injection Docker RCE +1

NVD GitHub

CVSS 3.1

8.8

EPSS

1.4%

CVE-2017-1000009 PHP CRITICAL PATCH Act Now

Akeneo PIM CE and EE <1.6.6, <1.5.15, <1.4.28 are vulnerable to shell injection in the mass edition, resulting in remote execution. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Epss exploitation probability 10.5%.

Command Injection Product Information Management

NVD GitHub

CVSS 3.1

9.8

EPSS

10.5%

CVE-2022-46157 PHP

EPSS 1% CVSS 8.8

HIGH POC PATCH This Week

Apache PHP Code Injection +3

NVD GitHub

CVE-2017-1000009 PHP

EPSS 10% CVSS 9.8

CRITICAL PATCH Act Now

Command Injection Product Information Management

NVD GitHub