Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

salesagility suitecrm 7.14.2 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2023-6388
Suite CRM version 7.14.2 allows making arbitrary HTTP requests through the vulnerable server. This is possible because the application is vulnerable to SSRF.
Salesagility Suitecrm 7.14.2
NA
CVE-2023-6130
Path Traversal: '\..\filename' in GitHub repository salesagility/suitecrm before 7.14.2, 7.12.14, 8.4.2.
Salesagility Suitecrm 8.4.1Salesagility Suitecrm 8.4.0Salesagility Suitecrm 7.14.0Salesagility SuitecrmSalesagility Suitecrm 7.14.1
NA
CVE-2023-6131
Code Injection in GitHub repository salesagility/suitecrm before 7.14.2, 7.12.14, 8.4.2.
Salesagility Suitecrm 8.4.1Salesagility Suitecrm 8.4.0Salesagility Suitecrm 7.14.0Salesagility SuitecrmSalesagility Suitecrm 7.14.1
NA
CVE-2023-6125
Code Injection in GitHub repository salesagility/suitecrm before 7.14.2, 7.12.14, 8.4.2.
Salesagility Suitecrm 8.4.1Salesagility Suitecrm 8.4.0Salesagility Suitecrm 7.14.0Salesagility SuitecrmSalesagility Suitecrm 7.14.1
NA
CVE-2023-6126
Code Injection in GitHub repository salesagility/suitecrm before 7.14.2, 7.12.14, 8.4.2.
Salesagility Suitecrm 8.4.1Salesagility Suitecrm 8.4.0Salesagility Suitecrm 7.14.0Salesagility SuitecrmSalesagility Suitecrm 7.14.1
NA
CVE-2023-6127
Unrestricted Upload of File with Dangerous Type in GitHub repository salesagility/suitecrm before 7.14.2, 7.12.14, 8.4.2.
Salesagility Suitecrm 8.4.1Salesagility Suitecrm 8.4.0Salesagility Suitecrm 7.14.0Salesagility SuitecrmSalesagility Suitecrm 7.14.1
NA
CVE-2023-6128
Cross-site Scripting (XSS) - Reflected in GitHub repository salesagility/suitecrm before 7.14.2, 7.12.14, 8.4.2.
Salesagility Suitecrm 8.4.1Salesagility Suitecrm 8.4.0Salesagility Suitecrm 7.14.0Salesagility SuitecrmSalesagility Suitecrm 7.14.1
NA
CVE-2023-6124
Server-Side Request Forgery (SSRF) in GitHub repository salesagility/suitecrm before 7.14.2, 8.4.2, 7.12.14.
Salesagility Suitecrm 8.4.1Salesagility Suitecrm 8.4.0Salesagility Suitecrm 7.14.0Salesagility SuitecrmSalesagility Suitecrm 7.14.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925CVE-2023-41826LFICVE-2022-22364CVE-2024-2887command injectionremote code executionCVE-2024-34446CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook