Akeneo Product Information Management — known CVE vulnerabilities

Every CVE whose affected-product data names Akeneo Product Information Management, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2017-1000009 — CVSS 9.8 (critical): Akeneo PIM CE and EE <1.6.6, <1.5.15, <1.4.28 are vulnerable to shell injection in the mass edition, resulting in remote execution.
• CVE-2022-46157 — CVSS 8.8 (high): Akeneo PIM is an open source Product Information Management (PIM). Akeneo PIM Community Edition versions before v5.0.119 and v6.0.53 allows…