Skip to contentSalesagility Suitecrm vulnerabilities
- salesagility suitecrmSuiteCRM 7.10.7 SQL Injection via record ParameterCVE-2019-256647.1 High
- salesagility suitecrmSuiteCRM 7.10.7 SQL Injection via parentTab ParameterCVE-2019-256637.1 High
- salesagility suitecrm, suitecrm suitecrm-core +1 moreSuiteCRM is Vulnerable to Authenticated Blind SQL Injection via GraphQLCVE-2025-644936.5 Medium
- salesagility suitecrm, suitecrm suitecrm-core +1 moreSuiteCRM is Vulnerable to Authenticated Time Based Blind SQL InjectionCVE-2025-644928.8 High
- salesagility suitecrmSuiteCRM is vulnerable to unauthenticated reflected XSS through its Login pageCVE-2025-644916.1 Medium
- salesagility suitecrmSuiteCRM's Inconsistent RBAC Enforcement Enables Access Control BypassCVE-2025-644908.3 High
- salesagility suitecrmSuiteCRM: Privilege Escalation via Improper Session Invalidation and Inactive User BypassCVE-2025-644898.3 High
- salesagility suitecrmSuiteCRM: Authenticated SQL Injection Possible in Reschedule Call ModuleCVE-2025-644888.6 High
- salesagility suitecrmSuiteCRM < 7.12.6 Type Confusion via 'deleteAttachment' FunctionalityCVE-2022-505908.8 High
- salesagility suitecrmSuiteCRM < 7.12.6 SQL Injection via 'export' FunctionalityCVE-2022-505899.3 Critical
- salesagility suitecrmReflected Cross-Site Scripting (XSS) in SuiteCRMCVE-2025-413845.1 Medium
- salesagility suitecrmSuiteCRM: Improper Authorization for attachment downloadsCVE-2025-547873.7 Low
- salesagility suitecrmSuiteCRM is vulnerable to Cross Site Scripting (XSS) through its email viewerCVE-2025-547848.6 High
- salesagility suitecrmSuiteCRM: Reflected Cross Site Scripting (XSS) through HTTP Referrer headerCVE-2025-547835.1 Medium
- salesagility suitecrmSuiteCRM: Authenticated Blind SQL Injection in InboundEmail moduleCVE-2025-547888.8 High
- salesagility suitecrm, suitecrm suitecrm-core +1 moreSuiteCRM: Legacy iCal service allows unauthenticated access to meeting dataCVE-2025-54786Fix available5.3 Medium
- salesagility suitecrmSuiteCRM is Vulnerable to PHP Object Injection in ReportsCVE-2025-547858.8 High
- salesagility suitecrmAn issue was discovered in SuiteCRM 7.12.7. Authenticated users can recover an arbitrary field of...CVE-2022-451868.1 High
- salesagility suitecrmAn issue was discovered in SuiteCRM 7.12.7. Authenticated users can use CRM functions to upload...CVE-2022-451858.8 High
- salesagility suitecrmAuthenticated XSS in "Publish Key" Field Allowing Unauthorized Administrator User Creation in SuiteCRMCVE-2024-50335Public exploitFix available4.9 Medium
- salesagility suitecrmRCE in ModuleBuilder in SuiteCRMCVE-2024-50333Fix available6.6 Medium
- salesagility suitecrmAuthenticated Blind SQL Injection in DeleteRelationShip in SuiteCRMCVE-2024-50332Fix available8.8 High
- salesagility suitecrmModuleScanner flaws in SuiteCRMCVE-2024-49774Fix available7.2 High
- salesagility suitecrmImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in SuiteCRMCVE-2024-49773Fix available5.3 Medium
- salesagility suitecrmAuthenticated SQL injection in AM_ProjectTemplates controller in SuiteCRMCVE-2024-49772Fix available8.8 High
- salesagility suitecrmSuiteCRM has wrong deletion permission checks on API delete callCVE-2024-45392Fix available7.7 High
- salesagility suitecrm, suitecrm-core +1 moreSuiteCRM-Core Host Header Injection in /legacyCVE-2024-36419Fix available4.3 Medium
- salesagility suitecrmSuiteCRM authenticated RCE using connectorsCVE-2024-36418Fix available8.6 High
- salesagility suitecrmSuiteCRM v4 API Excessive log data DOSCVE-2024-36416Public exploitFix available8.6 High
- salesagility suitecrmSuiteCRM Stored XSS Vulnerability Allows Code Execution via Malicious iFrameCVE-2024-36417Fix available5.7 Medium
- salesagility suitecrmSuiteCRM Improper Control of Filename for Include Statement in PHP and Unrestricted Upload of File with Dangerous content leads to authenticated remote code executionCVE-2024-36415Fix available9.1 Critical
- salesagility suitecrmSuiteCRM authenticated Server-Side Request ForgeryCVE-2024-36414Fix available7.7 High
- salesagility suitecrmSuiteCRM authenticated Reflected Cross-Site ScriptingCVE-2024-36413Fix available8.9 High
- salesagility suitecrmSuiteCRM unauthenticated SQL InjectionCVE-2024-36412Fix available10.0 Critical
- salesagility suitecrmSuiteCRM authenticated SQL Injection in EmailUIAjax displayView controllerCVE-2024-36411Fix available9.6 Critical
- salesagility suitecrmSuiteCRM authenticated SQL Injection in EmailUIAjax messages count controllerCVE-2024-36410Fix available9.6 Critical
- salesagility suitecrmSuiteCRM authenticated SQL Injection in TreeData entrypointCVE-2024-36409Fix available9.6 Critical
- salesagility suitecrmSuiteCRM authenticated SQL Injection in AlertsCVE-2024-36408Fix available9.6 Critical
- salesagility suitecrmSuiteCRM unauthenticated user password reset on php7CVE-2024-36407Fix available3.7 Low
- salesagility suitecrmSuiteCRM vulnerable to open redirectsCVE-2024-36406Fix available5.4 Medium
- suite crm crm, salesagility suitecrm +1 moreSuite CRM v7.14.2 - RCE via Local File InclusionCVE-2024-1644Fix available9.9 Critical
- suite crm crm, salesagility suitecrm +1 moreSuite CRM v7.14.2 - SSRFCVE-2023-6388Fix available5.0 Medium
- salesagility suitecrm, suitecrm-core +1 moreSuiteCRM has Unauthenticated Graphql Introspection EnabledCVE-2023-47643Fix available3.1 Low
- salesagility salesagility/suitecrm, suitecrm +1 moreCode Injection in salesagility/suitecrmCVE-2023-6131Fix available7.2 High
- salesagility salesagility/suitecrm, suitecrm +1 morePath Traversal: '\..\filename' in salesagility/suitecrmCVE-2023-6130Fix available7.5 High
- salesagility salesagility/suitecrm, suitecrm +1 moreCross-site Scripting (XSS) - Reflected in salesagility/suitecrmCVE-2023-6128Fix available6.8 Medium
- salesagility salesagility/suitecrm, suitecrm +1 moreUnrestricted Upload of File with Dangerous Type in salesagility/suitecrmCVE-2023-6127Fix available5.4 Medium
- salesagility salesagility/suitecrm, suitecrm +1 moreCode Injection in salesagility/suitecrmCVE-2023-6126Fix available4.3 Medium
- salesagility salesagility/suitecrm, suitecrm +1 moreCode Injection in salesagility/suitecrmCVE-2023-6125Fix available5.4 Medium
- salesagility salesagility/suitecrm, suitecrm +1 moreServer-Side Request Forgery (SSRF) in salesagility/suitecrmCVE-2023-6124Fix available5.0 Medium
- Show olderLoading…