Skip to content
Salesagility vulnerabilities
Newest
-
salesagility suitecrm
SuiteCRM 7.10.7 SQL Injection via record Parameter
CVE-2019-25664
7.1 High
-
salesagility suitecrm
SuiteCRM 7.10.7 SQL Injection via parentTab Parameter
CVE-2019-25663
7.1 High
-
salesagility suitecrm, suitecrm suitecrm-core +1 more
SuiteCRM is Vulnerable to Authenticated Blind SQL Injection via GraphQL
CVE-2025-64493
6.5 Medium
-
salesagility suitecrm, suitecrm suitecrm-core +1 more
SuiteCRM is Vulnerable to Authenticated Time Based Blind SQL Injection
CVE-2025-64492
8.8 High
-
salesagility suitecrm
SuiteCRM is vulnerable to unauthenticated reflected XSS through its Login page
CVE-2025-64491
6.1 Medium
-
salesagility suitecrm
SuiteCRM's Inconsistent RBAC Enforcement Enables Access Control Bypass
CVE-2025-64490
8.3 High
-
salesagility suitecrm
SuiteCRM: Privilege Escalation via Improper Session Invalidation and Inactive User Bypass
CVE-2025-64489
8.3 High
-
salesagility suitecrm
SuiteCRM: Authenticated SQL Injection Possible in Reschedule Call Module
CVE-2025-64488
8.6 High
-
salesagility suitecrm
SuiteCRM < 7.12.6 Type Confusion via 'deleteAttachment' Functionality
CVE-2022-50590
8.8 High
-
salesagility suitecrm
SuiteCRM < 7.12.6 SQL Injection via 'export' Functionality
CVE-2022-50589
9.3 Critical
-
salesagility suitecrm
Reflected Cross-Site Scripting (XSS) in SuiteCRM
CVE-2025-41384
5.1 Medium
-
salesagility suitecrm
SuiteCRM: Improper Authorization for attachment downloads
CVE-2025-54787
3.7 Low
-
salesagility suitecrm
SuiteCRM is vulnerable to Cross Site Scripting (XSS) through its email viewer
CVE-2025-54784
8.6 High
-
salesagility suitecrm
SuiteCRM: Reflected Cross Site Scripting (XSS) through HTTP Referrer header
CVE-2025-54783
5.1 Medium
-
salesagility suitecrm
SuiteCRM: Authenticated Blind SQL Injection in InboundEmail module
CVE-2025-54788
8.8 High
-
salesagility suitecrm, suitecrm suitecrm-core +1 more
SuiteCRM: Legacy iCal service allows unauthenticated access to meeting data
CVE-2025-54786
Fix available
5.3 Medium
-
salesagility suitecrm
SuiteCRM is Vulnerable to PHP Object Injection in Reports
CVE-2025-54785
8.8 High
-
salesagility suitecrm
An issue was discovered in SuiteCRM 7.12.7. Authenticated users can recover an arbitrary field of...
CVE-2022-45186
8.1 High
-
salesagility suitecrm
An issue was discovered in SuiteCRM 7.12.7. Authenticated users can use CRM functions to upload...
CVE-2022-45185
8.8 High
-
salesagility suitecrm
Authenticated XSS in "Publish Key" Field Allowing Unauthorized Administrator User Creation in SuiteCRM
CVE-2024-50335
Public exploitFix available
4.9 Medium
-
salesagility suitecrm
RCE in ModuleBuilder in SuiteCRM
CVE-2024-50333
Fix available
6.6 Medium
-
salesagility suitecrm
Authenticated Blind SQL Injection in DeleteRelationShip in SuiteCRM
CVE-2024-50332
Fix available
8.8 High
-
salesagility suitecrm
ModuleScanner flaws in SuiteCRM
CVE-2024-49774
Fix available
7.2 High
-
salesagility suitecrm
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in SuiteCRM
CVE-2024-49773
Fix available
5.3 Medium
-
salesagility suitecrm
Authenticated SQL injection in AM_ProjectTemplates controller in SuiteCRM
CVE-2024-49772
Fix available
8.8 High
-
salesagility suitecrm
SuiteCRM has wrong deletion permission checks on API delete call
CVE-2024-45392
Fix available
7.7 High
-
salesagility suitecrm, suitecrm-core +1 more
SuiteCRM-Core Host Header Injection in /legacy
CVE-2024-36419
Fix available
4.3 Medium
-
salesagility suitecrm
SuiteCRM authenticated RCE using connectors
CVE-2024-36418
Fix available
8.6 High
-
salesagility suitecrm
SuiteCRM v4 API Excessive log data DOS
CVE-2024-36416
Public exploitFix available
8.6 High
-
salesagility suitecrm
SuiteCRM Stored XSS Vulnerability Allows Code Execution via Malicious iFrame
CVE-2024-36417
Fix available
5.7 Medium
-
salesagility suitecrm
SuiteCRM Improper Control of Filename for Include Statement in PHP and Unrestricted Upload of File with Dangerous content leads to authenticated remote code execution
CVE-2024-36415
Fix available
9.1 Critical
-
salesagility suitecrm
SuiteCRM authenticated Server-Side Request Forgery
CVE-2024-36414
Fix available
7.7 High
-
salesagility suitecrm
SuiteCRM authenticated Reflected Cross-Site Scripting
CVE-2024-36413
Fix available
8.9 High
-
salesagility suitecrm
SuiteCRM unauthenticated SQL Injection
CVE-2024-36412
Fix available
10.0 Critical
-
salesagility suitecrm
SuiteCRM authenticated SQL Injection in EmailUIAjax displayView controller
CVE-2024-36411
Fix available
9.6 Critical
-
salesagility suitecrm
SuiteCRM authenticated SQL Injection in EmailUIAjax messages count controller
CVE-2024-36410
Fix available
9.6 Critical
-
salesagility suitecrm
SuiteCRM authenticated SQL Injection in TreeData entrypoint
CVE-2024-36409
Fix available
9.6 Critical
-
salesagility suitecrm
SuiteCRM authenticated SQL Injection in Alerts
CVE-2024-36408
Fix available
9.6 Critical
-
salesagility suitecrm
SuiteCRM unauthenticated user password reset on php7
CVE-2024-36407
Fix available
3.7 Low
-
salesagility suitecrm
SuiteCRM vulnerable to open redirects
CVE-2024-36406
Fix available
5.4 Medium
-
suite crm crm, salesagility suitecrm +1 more
Suite CRM v7.14.2 - RCE via Local File Inclusion
CVE-2024-1644
Fix available
9.9 Critical
-
suite crm crm, salesagility suitecrm +1 more
Suite CRM v7.14.2 - SSRF
CVE-2023-6388
Fix available
5.0 Medium
-
salesagility suitecrm, suitecrm-core +1 more
SuiteCRM has Unauthenticated Graphql Introspection Enabled
CVE-2023-47643
Fix available
3.1 Low
-
salesagility salesagility/suitecrm, suitecrm +1 more
Code Injection in salesagility/suitecrm
CVE-2023-6131
Fix available
7.2 High
-
salesagility salesagility/suitecrm, suitecrm +1 more
Path Traversal: '\..\filename' in salesagility/suitecrm
CVE-2023-6130
Fix available
7.5 High
-
salesagility salesagility/suitecrm, suitecrm +1 more
Cross-site Scripting (XSS) - Reflected in salesagility/suitecrm
CVE-2023-6128
Fix available
6.8 Medium
-
salesagility salesagility/suitecrm, suitecrm +1 more
Unrestricted Upload of File with Dangerous Type in salesagility/suitecrm
CVE-2023-6127
Fix available
5.4 Medium
-
salesagility salesagility/suitecrm, suitecrm +1 more
Code Injection in salesagility/suitecrm
CVE-2023-6126
Fix available
4.3 Medium
-
salesagility salesagility/suitecrm, suitecrm +1 more
Code Injection in salesagility/suitecrm
CVE-2023-6125
Fix available
5.4 Medium
-
salesagility salesagility/suitecrm, suitecrm +1 more
Server-Side Request Forgery (SSRF) in salesagility/suitecrm
CVE-2023-6124
Fix available
5.0 Medium
- Show olderLoading…