Skip to contentSalesagility vulnerabilities
Newest
- salesagility salesagility/suitecrm, suitecrm +1 moreImproper Access Control in salesagility/suitecrmCVE-2023-5353Fix available8.1 High
- salesagility salesagility/suitecrm, suitecrm +1 moreCross-site Scripting (XSS) - Stored in salesagility/suitecrmCVE-2023-5351Fix available8.9 High
- salesagility salesagility/suitecrm, suitecrm +1 moreSQL Injection in salesagility/suitecrmCVE-2023-5350Fix available6.4 Medium
- salesagility salesagility/suitecrm-core, suitecrm +1 moreCross-Site Request Forgery (CSRF) in salesagility/suitecrm-coreCVE-2023-3627Fix available8.1 High
- salesagility salesagility/suitecrm-core, suitecrm +1 moreCross-site Scripting (XSS) - Stored in salesagility/suitecrm-coreCVE-2023-3293Fix available7.6 High
- salesagility salesagility/suitecrm, suitecrm +1 morePath Traversal: '\..\filename' in salesagility/suitecrmCVE-2023-1034Fix availableEPSS 26.2%4.3 Medium
- salesagility suitecrmSuiteCRM v7.11.23 was discovered to allow remote code execution via a crafted payload injected...CVE-2022-27474Fix availableEPSS 23.1%7.2 High
- salesagility suitecrmSuiteCRM through 7.12.1 and 8.x through 8.0.1 allows Remote Code Execution. Authenticated users...CVE-2022-23940Public exploitFix availableEPSS 53.5%8.8 High
- salesagility salesagility/suitecrm, suitecrm +1 moreSQL Injection in salesagility/suitecrmCVE-2022-0754Fix available7.1 High
- salesagility salesagility/suitecrm, suitecrm +1 moreMissing Authorization in salesagility/suitecrmCVE-2022-0756Fix available5.4 Medium
- salesagility salesagility/suitecrm, suitecrm +1 moreMissing Authorization in salesagility/suitecrmCVE-2022-0755Fix available7.1 High
- salesagility suitecrmSuiteCRM before 7.12.3 and 8.x before 8.0.2 allows PHAR deserialization that can lead to remote...CVE-2021-45899Fix available9.8 Critical
- salesagility suitecrmSuiteCRM before 7.12.3 and 8.x before 8.0.2 allows local file inclusion.CVE-2021-45898Fix available9.8 Critical
- salesagility suitecrmSuiteCRM before 7.12.3 and 8.x before 8.0.2 allows remote code execution.CVE-2021-45897Public exploitFix available8.8 High
- salesagility suitecrmSuiteCRM through 7.11.21 is vulnerable to CSRF, with resultant remote code execution, via the...CVE-2021-41597Fix available8.8 High
- salesagility suitecrmA persistent cross-site scripting (XSS) issue in the web interface of SuiteCRM before 7.10.35,...CVE-2021-45903Fix available6.1 Medium
- salesagility suitecrmSuiteCRM before 7.12.2 and 8.x before 8.0.1 allows authenticated SQL injection.CVE-2021-45041Public exploitFix available8.8 High
- salesagility suitecrmSuiteCRM before 7.11.19 allows remote code execution via the system settings Log File Name...CVE-2021-42840Public exploitFix availableEPSS 58.6%8.8 High
- salesagility suitecrmSuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An...CVE-2021-41596Fix available5.3 Medium
- salesagility suitecrmSuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An...CVE-2021-41595Fix available5.3 Medium
- salesagility suitecrmSuiteCRM 7.10.x before 7.10.33 and 7.11.x before 7.11.22 is vulnerable to privilege escalation.CVE-2021-41869Fix available8.8 High
- salesagility suitecrmSuiteCRM - CSV Injection in Accounts ModuleCVE-2021-25960Fix available8.0 High
- salesagility suitecrmSuiteCRM - Account Takeover in Password Reset FunctionalityCVE-2021-25961Fix available8.0 High
- salesagility suitecrmPersistent cross-site scripting (XSS) in the web interface of SuiteCRM before 7.11.19 allows a...CVE-2021-39267Fix available6.1 Medium
- salesagility suitecrmPersistent cross-site scripting (XSS) in the web interface of SuiteCRM before 7.11.19 allows a...CVE-2021-39268Fix available6.1 Medium
- salesagility suitecrmXSS in the client account page in SuiteCRM before 7.11.19 allows an attacker to inject JavaScript...CVE-2021-31792Fix available5.4 Medium
- salesagility suitecrmSuiteCRM 7.11.13 is affected by stored Cross-Site Scripting (XSS) in the Documents preview...CVE-2020-14208Fix available5.4 Medium
- salesagility suitecrmSuiteCRM through 7.11.13 has an Open Redirect in the Documents module via a crafted SVG document.CVE-2020-15300Fix available6.1 Medium
- salesagility suitecrmSuiteCRM through 7.11.13 allows CSV Injection via registration fields in the Accounts, Contacts,...CVE-2020-15301Fix available7.8 High
- salesagility suitecrmSuiteCRM before 7.11.17 is vulnerable to remote code execution via the system settings Log File...CVE-2020-28328Public exploitFix availableEPSS 63.3%8.8 High
- salesagility suitecrmSuiteCRM 7.10.x prior to 7.10.21 and 7.11.x prior to 7.11.9 does not correctly implement the ...CVE-2019-187825.3 Medium
- salesagility suitecrmSuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL...CVE-2020-8784Fix available9.8 Critical
- salesagility suitecrmSuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL...CVE-2020-8785Fix available9.8 Critical
- salesagility suitecrmSuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL...CVE-2020-8786Fix available9.8 Critical
- salesagility suitecrmSuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow for an...CVE-2020-8787Fix available7.5 High
- salesagility suitecrmSuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL...CVE-2020-8783Fix available9.8 Critical
- salesagility suitecrmSuiteCRM through 7.11.10 allows SQL Injection via the SOAP API, the EmailUIAjax interface, or the...CVE-2020-8804Fix available6.5 Medium
- salesagility suitecrmSuiteCRM through 7.11.11 allows Directory Traversal to include arbitrary .php files within the...CVE-2020-8803Fix available9.8 Critical
- salesagility suitecrmSuiteCRM through 7.11.11 has Incorrect Access Control via action_saveHTMLField Bean Manipulation.CVE-2020-8802Fix available9.8 Critical
- salesagility suitecrmSuiteCRM through 7.11.11 allows PHAR Deserialization.CVE-2020-8801Fix available7.2 High
- salesagility suitecrmSuiteCRM through 7.11.11 allows EmailsControllerActionGetFromFields PHP Object Injection.CVE-2020-8800Fix available8.8 High
- salesagility suitecrmSuiteCRM 7.10.x versions prior to 7.10.21 and 7.11.x versions prior to 7.11.9 allow SQL Injection.CVE-2019-187849.8 Critical
- salesagility suitecrmSuiteCRM 7.11.x and 7.10.x before 7.11.8 and 7.10.20 is vulnerable to vertical privilege escalation.CVE-2019-144549.8 Critical
- salesagility suitecrmSalesAgility SuiteCRM 7.10.x 7.10.19 and 7.11.x before and 7.11.7 has SSRF.CVE-2019-133359.8 Critical
- salesagility suitecrmSuiteCRM 7.10.x and 7.11.x has XSS.CVE-2019-147526.1 Medium
- salesagility suitecrmSuiteCRM 7.10.x before 7.10.20 and 7.11.x before 7.11.8 allows unintended public exposure of files.CVE-2019-169225.3 Medium
- salesagility suitecrmSuiteCRM 7.10.x before 7.10.17 and 7.11.x before 7.11.5 allows SQL Injection.CVE-2019-125999.8 Critical
- salesagility suitecrmSuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL...CVE-2019-125989.8 Critical
- salesagility suitecrmSuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL...CVE-2019-126009.8 Critical
- salesagility suitecrmSuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL...CVE-2019-126019.8 Critical
- Show moreLoading…