Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
suitecrm vulnerabilities and exploits
(subscribe to this query)
6.5
CVSSv2
CVE-2022-27474
SuiteCRM v7.11.23 exists to allow remote code execution via a crafted payload injected into the FirstName text field.
Salesagility Suitecrm 7.11.23
6.5
CVSSv2
CVE-2022-23940
SuiteCRM up to and including 7.12.1 and 8.x up to and including 8.0.1 allows Remote Code Execution. Authenticated users with access to the Scheduled Reports module can achieve this by leveraging PHP deserialization in the email_recipients property. By using a crafted request, the...
Salesagility Suitecrm
1 Github repository
4
CVSSv2
CVE-2022-0755
Missing Authorization in GitHub repository salesagility/suitecrm before 7.12.5.
Salesagility Suitecrm
4
CVSSv2
CVE-2022-0754
SQL Injection in GitHub repository salesagility/suitecrm before 7.12.5.
Salesagility Suitecrm
4
CVSSv2
CVE-2022-0756
Missing Authorization in GitHub repository salesagility/suitecrm before 7.12.5.
Salesagility Suitecrm
6.5
CVSSv2
CVE-2021-45897
SuiteCRM prior to 7.12.3 and 8.x prior to 8.0.2 allows remote code execution.
Salesagility Suitecrm 8.0
Salesagility Suitecrm
1 Github repository
7.5
CVSSv2
CVE-2021-45898
SuiteCRM prior to 7.12.3 and 8.x prior to 8.0.2 allows local file inclusion.
Salesagility Suitecrm 8.0
Salesagility Suitecrm
7.5
CVSSv2
CVE-2021-45899
SuiteCRM prior to 7.12.3 and 8.x prior to 8.0.2 allows PHAR deserialization that can lead to remote code execution.
Salesagility Suitecrm 8.0
Salesagility Suitecrm
6.8
CVSSv2
CVE-2021-41597
SuiteCRM up to and including 7.11.21 is vulnerable to CSRF, with resultant remote code execution, via the UpgradeWizard functionality, if a PHP file is included in a ZIP archive.
Salesagility Suitecrm
4.3
CVSSv2
CVE-2021-45903
A persistent cross-site scripting (XSS) issue in the web interface of SuiteCRM prior to 7.10.35, and 7.11.x and 7.12.x prior to 7.12.2, allows a remote malicious user to introduce arbitrary JavaScript via attachments upload, a different vulnerability than CVE-2021-39267 and CVE-2...
Salesagility Suitecrm
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3080
log injection
CVE-2024-6041
CVE-2024-37661
XML external entity
CVE-2024-0845
privilege escalation
CVE-2023-37057
CVE-2024-27801
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
NEXT »