Known vulnerabilities in SuiteCRM 7.7-beta1 - page 2

Vendor: SalesAgility
Software: SuiteCRM
Version: 7.7-beta1
Software CPE: cpe:2.3:a:salesility:suitecrm:*:*:*:*:*:*:*:*
Website: https://salesagility.com/
Total vulnerabilities: 63
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SuiteCRM version 7.7-beta1 SuiteCRM 7.7-beta1 is affected by 63 vulnerabilities: 2 high, 36 medium, 25 low Critical High Medium Low

Vulnerabilities (63)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141077 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-69135		 CWE-89 Low
No
No
 7.15.2, 8.10.2 06.08.2026 SB2026080113
#VU141076 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-69136		 CWE-89 Low
No
No
 7.15.2, 8.10.2 06.08.2026 SB2026080113
#VU141075 - Server-Side Request Forgery (SSRF)
CVE-2026-69137		 CWE-918 Low
No
No
 7.15.2, 8.10.2 06.08.2026 SB2026080113
#VU129776 - Server-Side Request Forgery (SSRF)
CVE-2026-29107		 CWE-918 Low
No
No
 7.15.1, 8.9.3 05.05.2026 SB2026042405
#VU127411 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-29106		 CWE-79 Low
No
No
 7.15.1, 8.9.3 24.04.2026 SB2026042405
#VU127410 - Unrestricted Upload of File with Dangerous Type
CVE-2026-29104		 CWE-434 Low
No
No
 7.15.1, 8.9.3 24.04.2026 SB2026042405
#VU127409 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-29105		 CWE-601 Medium
No
No
 7.15.1, 8.9.3 24.04.2026 SB2026042405
#VU127408 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-29103		 CWE-94 Low
No
No
 7.15.1, 8.9.3 24.04.2026 SB2026042405
#VU127407 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-29102		 CWE-94 Low
No
No
 7.15.1, 8.9.3 24.04.2026 SB2026042405
#VU127406 - Relative Path Traversal
CVE-2026-29101		 CWE-23 Low
No
No
 7.15.1, 8.9.3 24.04.2026 SB2026042405
#VU127405 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-29100		 CWE-79 Medium
No
No
 7.15.1 24.04.2026 SB2026042405
#VU127404 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-29099		 CWE-89 Medium
No
No
 7.15.1, 8.9.3 24.04.2026 SB2026042405
#VU127403 - Relative Path Traversal
CVE-2026-29098		 CWE-23 Low
No
No
 7.15.1, 8.9.3 24.04.2026 SB2026042405
#VU127402 - Server-Side Request Forgery (SSRF)
CVE-2026-29097		 CWE-918 Medium
No
No
 7.15.1, 8.9.3 24.04.2026 SB2026042405
#VU127401 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-29096		 CWE-89 Medium
No
No
 7.15.1, 8.9.3 24.04.2026 SB2026042405
#VU127400 - Authorization Bypass Through User-Controlled Key
CVE-2026-29189		 CWE-639 Medium
No
No
 7.15.1, 8.9.3 24.04.2026 SB2026042405
#VU127399 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2026-33289		 CWE-90 Medium
No
No
 7.15.1 24.04.2026 SB2026042405
#VU127398 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-33288		 CWE-89 Medium
No
No
 7.15.1 24.04.2026 SB2026042405
#VU127397 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-64488		 CWE-89 Medium
No
No
 7.14.8, 8.9.1 24.04.2026 SB2026042404
#VU127396 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-64491		 CWE-79 Medium
No
No
 7.14.8 24.04.2026 SB2026042404


Showing elements 21 - 40 out of 63