Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
crm vulnerabilities and exploits
(subscribe to this query)
312
VMScore
CVE-2015-2649
Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.22, and 15.0 allows remote authenticated users to affect confidentiality via vectors related to UIF Open UI.
Oracle Siebel Crm 8.1.1
Oracle Siebel Crm 8.2.2
Oracle Siebel Crm 15.0
383
VMScore
CVE-2011-0843
Unspecified vulnerability in the Siebel CRM Core component in Oracle Siebel CRM 7.8.2, 8.0.0, and 8.1.1 allows remote malicious users to affect integrity via unknown vectors related to Globalization - Automotive.
Oracle Siebel Crm 7.8.2
Oracle Siebel Crm 8.1.1
Oracle Siebel Crm 8.0.0
383
VMScore
CVE-2011-0833
Unspecified vulnerability in the Siebel CRM Core component in Oracle Siebel CRM 7.8.2, 8.0.0, and 8.1.1 allows remote malicious users to affect integrity, related to UIF Client.
Oracle Siebel Crm 7.8.2
Oracle Siebel Crm 8.0.0
Oracle Siebel Crm 8.1.1
312
VMScore
CVE-2015-2600
Unspecified vulnerability in the Siebel Core - Server OM Svcs component in Oracle Siebel CRM 8.1.1, 8.2.2, and 15.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.
Oracle Siebel Crm 8.2.2
Oracle Siebel Crm 8.1.1
Oracle Siebel Crm 15.0
NA
CVE-2022-47073
A cross-site scripting (XSS) vulnerability in the Create Ticket page of Small CRM v3.0 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload injected into the Subject parameter.
Small Crm Project Small Crm 3.0
578
VMScore
CVE-2020-5511
PHPGurukul Small CRM v2.0 was found vulnerable to authentication bypass via SQL injection when logging into the administrator login page.
Small Crm Project Small Crm 2.0
NA
CVE-2023-45394
Stored Cross-Site Scripting (XSS) vulnerability in the Company field in the "Request a Quote" Section of Small CRM v3.0 allows an malicious user to store and execute malicious javascript code in the Admin panel which leads to Admin account takeover.
Small Crm Project Small Crm 3.0
NA
CVE-2023-43331
A cross-site scripting (XSS) vulnerability in the Add User function of Small CRM v3.0 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field.
Small Crm Project Small Crm 3.0
755
VMScore
CVE-2014-5520
SQL injection vulnerability in XRMS CRM, possibly 1.99.2, allows remote malicious users to execute arbitrary SQL commands via the user_id parameter to plugins/webform/new-form.php, which is not properly handled by plugins/useradmin/fingeruser.php.
Xrms Crm Project Xrms Crm 1.99.2
1 EDB exploit
655
VMScore
CVE-2014-5521
plugins/useradmin/fingeruser.php in XRMS CRM, possibly 1.99.2, allows remote authenticated users to execute arbitrary code via shell metacharacters in the username parameter.
Xrms Crm Project Xrms Crm 1.99.2
1 EDB exploit
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322
cross-site request forgery
unauthorized
CVE-2024-33925
reflected XSS
CVE-2023-51580
CVE-2023-51579
CVE-2015-2051
CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
NEXT »