Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

salesagility suitecrm 8.4.1 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv3
CVE-2023-6124
Server-Side Request Forgery (SSRF) in GitHub repository salesagility/suitecrm before 7.14.2, 8.4.2, 7.12.14.
Salesagility Suitecrm 8.4.1Salesagility Suitecrm 8.4.0Salesagility Suitecrm 7.14.0Salesagility SuitecrmSalesagility Suitecrm 7.14.1
8.8
CVSSv3
CVE-2023-6125
Code Injection in GitHub repository salesagility/suitecrm before 7.14.2, 7.12.14, 8.4.2.
Salesagility Suitecrm 8.4.1Salesagility Suitecrm 8.4.0Salesagility Suitecrm 7.14.0Salesagility SuitecrmSalesagility Suitecrm 7.14.1
9.8
CVSSv3
CVE-2023-6126
Code Injection in GitHub repository salesagility/suitecrm before 7.14.2, 7.12.14, 8.4.2.
Salesagility Suitecrm 8.4.1Salesagility Suitecrm 8.4.0Salesagility Suitecrm 7.14.0Salesagility SuitecrmSalesagility Suitecrm 7.14.1
5.4
CVSSv3
CVE-2023-6127
Unrestricted Upload of File with Dangerous Type in GitHub repository salesagility/suitecrm before 7.14.2, 7.12.14, 8.4.2.
Salesagility Suitecrm 8.4.1Salesagility Suitecrm 8.4.0Salesagility Suitecrm 7.14.0Salesagility SuitecrmSalesagility Suitecrm 7.14.1
5.4
CVSSv3
CVE-2023-6128
Cross-site Scripting (XSS) - Reflected in GitHub repository salesagility/suitecrm before 7.14.2, 7.12.14, 8.4.2.
Salesagility Suitecrm 8.4.1Salesagility Suitecrm 8.4.0Salesagility Suitecrm 7.14.0Salesagility SuitecrmSalesagility Suitecrm 7.14.1
8.8
CVSSv3
CVE-2023-6130
Path Traversal: '\..\filename' in GitHub repository salesagility/suitecrm before 7.14.2, 7.12.14, 8.4.2.
Salesagility Suitecrm 8.4.1Salesagility Suitecrm 8.4.0Salesagility Suitecrm 7.14.0Salesagility SuitecrmSalesagility Suitecrm 7.14.1
8.8
CVSSv3
CVE-2023-6131
Code Injection in GitHub repository salesagility/suitecrm before 7.14.2, 7.12.14, 8.4.2.
Salesagility Suitecrm 8.4.1Salesagility Suitecrm 8.4.0Salesagility Suitecrm 7.14.0Salesagility SuitecrmSalesagility Suitecrm 7.14.1
5.3
CVSSv3
CVE-2023-47643
SuiteCRM is a Customer Relationship Management (CRM) software application. Prior to version 8.4.2, Graphql Introspection is enabled without authentication, exposing the scheme defining all object types, arguments, and functions. An attacker can obtain the GraphQL schema and under...
Salesagility Suitecrm 8.4.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook