Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
crm vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2015-2587
Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, and 15.0 allows remote malicious users to affect integrity via vectors related to SWSE Server Infrastructure.
Oracle Siebel Crm 8.1.1
Oracle Siebel Crm 8.2.2
Oracle Siebel Crm 15.0
NA
CVE-2015-2600
Unspecified vulnerability in the Siebel Core - Server OM Svcs component in Oracle Siebel CRM 8.1.1, 8.2.2, and 15.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.
Oracle Siebel Crm 8.2.2
Oracle Siebel Crm 8.1.1
Oracle Siebel Crm 15.0
NA
CVE-2015-2612
Unspecified vulnerability in the Siebel Core - Server OM Svcs component in Oracle Siebel CRM 8.1.1, 8.2.2, and 15.0 allows remote malicious users to affect confidentiality via vectors related to LDAP Security Adapter.
Oracle Siebel Crm 8.1.1
Oracle Siebel Crm 8.2.2
Oracle Siebel Crm 15.0
NA
CVE-2015-2649
Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.22, and 15.0 allows remote authenticated users to affect confidentiality via vectors related to UIF Open UI.
Oracle Siebel Crm 8.1.1
Oracle Siebel Crm 8.2.2
Oracle Siebel Crm 15.0
5.4
CVSSv3
CVE-2023-45394
Stored Cross-Site Scripting (XSS) vulnerability in the Company field in the "Request a Quote" Section of Small CRM v3.0 allows an malicious user to store and execute malicious javascript code in the Admin panel which leads to Admin account takeover.
Small Crm Project Small Crm 3.0
NA
CVE-2014-5520
SQL injection vulnerability in XRMS CRM, possibly 1.99.2, allows remote malicious users to execute arbitrary SQL commands via the user_id parameter to plugins/webform/new-form.php, which is not properly handled by plugins/useradmin/fingeruser.php.
Xrms Crm Project Xrms Crm 1.99.2
1 EDB exploit
NA
CVE-2014-5521
plugins/useradmin/fingeruser.php in XRMS CRM, possibly 1.99.2, allows remote authenticated users to execute arbitrary code via shell metacharacters in the username parameter.
Xrms Crm Project Xrms Crm 1.99.2
1 EDB exploit
5.4
CVSSv3
CVE-2022-47073
A cross-site scripting (XSS) vulnerability in the Create Ticket page of Small CRM v3.0 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload injected into the Subject parameter.
Small Crm Project Small Crm 3.0
5.4
CVSSv3
CVE-2023-44075
Cross Site Scripting vulnerability in Small CRM in PHP v.3.0 allows a remote malicious user to execute arbitrary code via a crafted payload to the Address parameter.
Small Crm Project Small Crm 3.0
5.4
CVSSv3
CVE-2023-43331
A cross-site scripting (XSS) vulnerability in the Add User function of Small CRM v3.0 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field.
Small Crm Project Small Crm 3.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322
CVE-2006-4304
wireless
CVE-2023-23022
local file inclusion
CVE-2024-27058
CVE-2024-33820
open redirect
CVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
NEXT »