Known vulnerabilities in SuiteCRM 7.9.0-beta - page 3

Vendor: SalesAgility
Software: SuiteCRM
Version: 7.9.0-beta
Software CPE: cpe:2.3:a:salesility:suitecrm:*:*:*:*:*:*:*:*
Website: https://salesagility.com/
Total vulnerabilities: 63
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SuiteCRM version 7.9.0-beta SuiteCRM 7.9.0-beta is affected by 63 vulnerabilities: 2 high, 36 medium, 25 low Critical High Medium Low

Vulnerabilities (63)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU127395 - Improper Authorization
CVE-2025-64489		 CWE-285 Medium
No
No
 7.14.8, 8.9.1 24.04.2026 SB2026042404
#VU127394 - Improper Access Control
CVE-2025-64490		 CWE-284 Medium
No
No
 7.14.8, 8.9.1 24.04.2026 SB2026042404
#VU127389 - Improper input validation
CVE-2024-49774		 CWE-20 Low
No
No
 7.14.6, 8.7.1 05.11.2024 SB20241105111
#VU127392 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-49772		 CWE-89 Medium
No
No
 7.14.6, 8.7.1 05.11.2024 SB20241105111
#VU127390 - Improper input validation
CVE-2024-50333		 CWE-20 Low
No
No
 7.14.6, 8.7.1 05.11.2024 SB20241105111
#VU127388 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-50332		 CWE-89 Medium
No
No
 7.14.6, 8.7.1 05.11.2024 SB20241105111
#VU127391 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-49773		 CWE-89 Low
No
No
 7.14.6, 8.7.1 05.11.2024 SB20241105111
#VU127393 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-50335		 CWE-79 Low
No
No
 7.14.6, 8.7.1 05.11.2024 SB20241105111
#VU127373 - Improper Access Control
CVE-2024-45392		 CWE-284 Low
No
No
 7.14.5, 8.6.2 05.09.2024 SB20240905116
#VU127378 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-36406		 CWE-601 Medium
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU127379 - Improper Access Control
CVE-2024-36407		 CWE-284 Medium
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU127380 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-36410		 CWE-89 Medium
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU127381 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-36411		 CWE-89 Medium
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU127382 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-36408		 CWE-89 Medium
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU127383 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-36409		 CWE-89 Medium
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU127387 - Unrestricted Upload of File with Dangerous Type
CVE-2024-36415		 CWE-434 Low
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU127377 - Logging of Excessive Data
CVE-2024-36416		 CWE-779 High
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU127376 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2024-36417		 CWE-80 Low
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU127375 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-36418		 CWE-22 Medium
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU127374 - Server-Side Request Forgery (SSRF)
CVE-2023-6388		 CWE-918 Low
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123


Showing elements 41 - 60 out of 63