Known vulnerabilities in SuiteCRM 7.4-beta - page 3

Vendor: SalesAgility
Software: SuiteCRM
Version: 7.4-beta
Software CPE: cpe:2.3:a:salesility:suitecrm:*:*:*:*:*:*:*:*
Website: https://salesagility.com/
Total vulnerabilities: 64
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SuiteCRM version 7.4-beta SuiteCRM 7.4-beta is affected by 64 vulnerabilities: 2 high, 37 medium, 25 low Critical High Medium Low

Vulnerabilities (64)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU127397 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-64488		 CWE-89 Medium
No
No
 7.14.8, 8.9.1 24.04.2026 SB2026042404
#VU127396 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-64491		 CWE-79 Medium
No
No
 7.14.8 24.04.2026 SB2026042404
#VU127389 - Improper input validation
CVE-2024-49774		 CWE-20 Low
No
No
 7.14.6, 8.7.1 05.11.2024 SB20241105111
#VU127392 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-49772		 CWE-89 Medium
No
No
 7.14.6, 8.7.1 05.11.2024 SB20241105111
#VU127390 - Improper input validation
CVE-2024-50333		 CWE-20 Low
No
No
 7.14.6, 8.7.1 05.11.2024 SB20241105111
#VU127388 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-50332		 CWE-89 Medium
No
No
 7.14.6, 8.7.1 05.11.2024 SB20241105111
#VU127391 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-49773		 CWE-89 Low
No
No
 7.14.6, 8.7.1 05.11.2024 SB20241105111
#VU127393 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-50335		 CWE-79 Low
No
No
 7.14.6, 8.7.1 05.11.2024 SB20241105111
#VU127373 - Improper Access Control
CVE-2024-45392		 CWE-284 Low
No
No
 7.14.5, 8.6.2 05.09.2024 SB20240905116
#VU127378 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-36406		 CWE-601 Medium
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU127379 - Improper Access Control
CVE-2024-36407		 CWE-284 Medium
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU127380 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-36410		 CWE-89 Medium
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU127381 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-36411		 CWE-89 Medium
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU127382 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-36408		 CWE-89 Medium
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU127383 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-36409		 CWE-89 Medium
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU127384 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-36412		 CWE-89 High
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU127385 - Improper Neutralization of Alternate XSS Syntax
CVE-2024-36413		 CWE-87 Medium
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU127386 - Server-Side Request Forgery (SSRF)
CVE-2024-36414		 CWE-918 Low
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU127387 - Unrestricted Upload of File with Dangerous Type
CVE-2024-36415		 CWE-434 Low
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU127377 - Logging of Excessive Data
CVE-2024-36416		 CWE-779 High
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123


Showing elements 41 - 60 out of 64