suitecrm vulnerabilities (Bitnami)
74 vulnerabilities.
suitecrmBitnamiSuiteCRM before 7.12.2 and 8.x before 8.0.1 allows authenticated SQL injection.8.8 HighsuitecrmBitnamiSuiteCRM before 7.11.19 allows remote code execution via the system settings Log File Name...8.8 HighsuitecrmBitnamiSuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An...5.3 MediumsuitecrmBitnamiSuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An...5.3 MediumsuitecrmBitnamiSuiteCRM 7.10.x before 7.10.33 and 7.11.x before 7.11.22 is vulnerable to privilege escalation.8.8 HighsuitecrmBitnamiSuiteCRM - CSV Injection in Accounts Module8.0 HighsuitecrmBitnamiSuiteCRM - Account Takeover in Password Reset Functionality8.0 HighsuitecrmBitnamiPersistent cross-site scripting (XSS) in the web interface of SuiteCRM before 7.11.19 allows a...6.1 MediumsuitecrmBitnamiPersistent cross-site scripting (XSS) in the web interface of SuiteCRM before 7.11.19 allows a...6.1 MediumsuitecrmBitnamiXSS in the client account page in SuiteCRM before 7.11.19 allows an attacker to inject JavaScript...5.4 MediumsuitecrmBitnamiSuiteCRM 7.11.13 is affected by stored Cross-Site Scripting (XSS) in the Documents preview...5.4 MediumsuitecrmBitnamiSuiteCRM through 7.11.13 has an Open Redirect in the Documents module via a crafted SVG document.6.1 MediumsuitecrmBitnamiSuiteCRM through 7.11.13 allows CSV Injection via registration fields in the Accounts, Contacts,...7.8 HighsuitecrmBitnamiSuiteCRM before 7.11.17 is vulnerable to remote code execution via the system settings Log File...8.8 HighsuitecrmBitnamiSuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL...9.8 CriticalsuitecrmBitnamiSuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL...9.8 CriticalsuitecrmBitnamiSuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL...9.8 CriticalsuitecrmBitnamiSuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow for an...7.5 HighsuitecrmBitnamiSuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL...9.8 CriticalsuitecrmBitnamiSuiteCRM through 7.11.10 allows SQL Injection via the SOAP API, the EmailUIAjax interface, or the...6.5 MediumsuitecrmBitnamiSuiteCRM through 7.11.11 allows Directory Traversal to include arbitrary .php files within the...9.8 CriticalsuitecrmBitnamiSuiteCRM through 7.11.11 has Incorrect Access Control via action_saveHTMLField Bean Manipulation.9.8 CriticalsuitecrmBitnamiSuiteCRM through 7.11.11 allows PHAR Deserialization.7.2 HighsuitecrmBitnamiSuiteCRM through 7.11.11 allows EmailsControllerActionGetFromFields PHP Object Injection.8.8 High