Skip to content

Espocrm vulnerabilities

Products

Espocrm68

Newest

espocrmAn issue was discovered in EspoCRM before 5.6.9. Stored XSS was executed on the Preference page...CVE-2019-145465.4 MediumAugust 5, 2019
espocrmAn issue was discovered in EspoCRM before 5.6.9. Stored XSS was executed when a victim clicks on...CVE-2019-145505.4 MediumAugust 5, 2019
espocrmAn issue was discovered in EspoCRM before 5.6.9. Stored XSS was executed inside the title and...CVE-2019-145495.4 MediumAugust 5, 2019
espocrmEspoCRM 5.6.4 is vulnerable to user password hash enumeration. A malicious authenticated attacker...CVE-2019-143518.8 HighJuly 28, 2019
espocrmEspoCRM 5.6.4 is vulnerable to stored XSS due to lack of filtration of user-supplied data in the...CVE-2019-143506.1 MediumJuly 28, 2019
espocrmEspoCRM version 5.6.4 is vulnerable to stored XSS due to lack of filtration of user-supplied data...CVE-2019-143496.1 MediumJuly 28, 2019
espocrmAn issue was discovered in EspoCRM before 5.6.6. Stored XSS exists due to lack of filtration of...CVE-2019-143316.1 MediumJuly 28, 2019
espocrmAn issue was discovered in EspoCRM before 5.6.6. Stored XSS exists due to lack of filtration of...CVE-2019-143306.1 MediumJuly 28, 2019
espocrmAn issue was discovered in EspoCRM before 5.6.6. There is stored XSS due to lack of filtration of...CVE-2019-143296.1 MediumJuly 28, 2019
espocrmStored XSS in EspoCRM before 5.6.4 allows remote attackers to execute malicious JavaScript and...CVE-2019-136436.1 MediumJuly 18, 2019
espocrmStored XSS exists in views/fields/wysiwyg.js in EspoCRM 5.3.6 via a /#Email/view saved draft...CVE-2018-173025.4 MediumSeptember 21, 2018
espocrmReflected XSS exists in client/res/templates/global-search/name-field.tpl in EspoCRM 5.3.6 via /...CVE-2018-173015.4 MediumSeptember 21, 2018
espocrmCross-site scripting (XSS) vulnerability in EspoCRM before 2.6.0 allows remote attackers to...CVE-2014-79874.3 MediumOctober 31, 2014
espocrminstall/index.php in EspoCRM before 2.6.0 allows remote attackers to re-install the application...CVE-2014-79865.0 MediumOctober 31, 2014
espocrmDirectory traversal vulnerability in EspoCRM before 2.6.0 allows remote attackers to include and...CVE-2014-798510.0 HighOctober 31, 2014
espocrmCross-site scripting (XSS) vulnerability in EspoCRM allows remote authenticated users to inject...CVE-2014-83303.5 LowOctober 20, 2014