Known vulnerabilities in SuiteCRM 7.3-beta - page 4

Vendor: SalesAgility
Software: SuiteCRM
Version: 7.3-beta
Software CPE: cpe:2.3:a:salesility:suitecrm:*:*:*:*:*:*:*:*
Website: https://salesagility.com/
Total vulnerabilities: 73
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SuiteCRM version 7.3-beta SuiteCRM 7.3-beta is affected by 73 vulnerabilities: 2 high, 41 medium, 30 low Critical High Medium Low

Vulnerabilities (73)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU162640 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-100365		 CWE-89 Medium
No
No
 7.15.2, 8.10.2 09.11.2026 SB2026080113
#VU162639 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-100359		 CWE-89 Low
No
No
 7.15.2, 8.10.2 09.11.2026 SB2026080113
#VU162638 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-97377		 CWE-89 Medium
No
No
 7.15.2, 8.10.2 09.11.2026 SB2026080113
#VU162637 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-100358		 CWE-94 Low
No
No
 7.15.2, 8.10.2 09.11.2026 SB2026080113
#VU162636 - Observable Response Discrepancy
CVE-2026-100362		 CWE-204 Medium
No
No
 7.15.2, 8.10.2 09.11.2026 SB2026080113
#VU154188 - Missing Authorization
CVE-2026-100363		 CWE-862 Medium
No
No
 7.15.2, 8.10.2 13.10.2026 SB2026080113
#VU154187 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-100361		 CWE-915 Low
No
No
 7.15.2, 8.10.2 13.10.2026 SB2026080113
#VU154186 - Missing Authorization
CVE-2026-100360		 CWE-862 Low
No
No
 7.15.2, 8.10.2 13.10.2026 SB2026080113
#VU154185 - Authorization Bypass Through User-Controlled Key
CVE-2026-100364		 CWE-639 Low
No
No
 7.15.2, 8.10.2 13.10.2026 SB2026080113
#VU144297 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-71550		 CWE-98 Medium
No
No
 7.15.2, 8.10.2 19.08.2026 SB2026080113
#VU144296 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-71548		 CWE-89 Medium
No
No
 7.15.2, 8.10.2 19.08.2026 SB2026080113
#VU141078 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-69134		 CWE-89 Medium
No
No
 7.15.2, 8.10.2 06.08.2026 SB2026080113
#VU141077 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-69135		 CWE-89 Low
No
No
 7.15.2, 8.10.2 06.08.2026 SB2026080113


Showing elements 61 - 80 out of 73