aimeos records
6 published records for vendor aimeos.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-270 Privilege Context Switching Error1
- CWE-639 Authorization Bypass Through User-Controlled Key1
- CWE-73 External Control of File Name or Path1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-841 Improper Enforcement of Behavioral Workflow1
- CWE-863 Incorrect Authorization1
The weakness classes this vendor ships most often: where to look.
CWEAll records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
28Monitor | CVE-2024-37295No exploit | Aimeos Core remote code execution in web server contextaimeos · aimeos-core · CWE-73 | High7.2 | — | 0.6% | Jun 11, 2024 |
24Monitor | CVE-2025-66468No exploit | Aimeos GrapesJS CMS extension possible stores XSS exploitable by authenticated editorsaimeos · grapesjs cms · CWE-79 | Medium6.1 | — | 0.3% | Dec 2, 2025 |
22Monitor | CVE-2024-37294No exploit | Aimeos denial of service vulnerability in SaaS and marketplace setupsaimeos · aimeos-core · CWE-270 | Medium5.5 | — | 0.4% | Jun 11, 2024 |
21Monitor | CVE-2024-39319No exploit | aimeos/ai-controller-frontend has IDOR vulnerability in account profile pageaimeos · aimeos frontend controller · CWE-639 | Medium5.3 | — | 0.4% | Sep 26, 2024 |
21Monitor | CVE-2024-39325No exploit | aimeos/ai-controller-frontend doesn't reset payment status in basketaimeos · aimeos frontend controller · CWE-841 | Medium5.3 | — | 0.4% | Jul 2, 2024 |
15Monitor | CVE-2024-39324No exploit | aimeos/ai-admin-graphql improper access control vulnerability allows editors to manage own servicesaimeos · ai-admin-graphql · CWE-863 | Low3.8 | — | 0.4% | Jul 2, 2024 |
- CVE-2024-3729528Monitor
Aimeos Core remote code execution in web server context
HighCVSS 7.2No exploitEPSS 0%aimeos · aimeos-coreJun 11, 2024
- CVE-2025-6646824Monitor
Aimeos GrapesJS CMS extension possible stores XSS exploitable by authenticated editors
MediumCVSS 6.1No exploitEPSS 0%aimeos · grapesjs cmsDec 2, 2025
- CVE-2024-3729422Monitor
Aimeos denial of service vulnerability in SaaS and marketplace setups
MediumCVSS 5.5No exploitEPSS 0%aimeos · aimeos-coreJun 11, 2024
- CVE-2024-3931921Monitor
aimeos/ai-controller-frontend has IDOR vulnerability in account profile page
MediumCVSS 5.3No exploitEPSS 0%aimeos · aimeos frontend controllerSep 26, 2024
- CVE-2024-3932521Monitor
aimeos/ai-controller-frontend doesn't reset payment status in basket
MediumCVSS 5.3No exploitEPSS 0%aimeos · aimeos frontend controllerJul 2, 2024
- CVE-2024-3932415Monitor
aimeos/ai-admin-graphql improper access control vulnerability allows editors to manage own services
LowCVSS 3.8No exploitEPSS 0%aimeos · ai-admin-graphqlJul 2, 2024