Known vulnerabilities in SuiteCRM - page 3

Vendor: SalesAgility
Software: SuiteCRM
Software CPE: cpe:2.3:a:salesility:suitecrm:*:*:*:*:*:*:*:*
Website: https://salesagility.com/
Total vulnerabilities: 100
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SuiteCRM SuiteCRM is affected by 100 known vulnerabilities: 14 high, 52 medium, 34 low Critical High Medium Low

Vulnerabilities (100)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113799 - Improper input validation
CVE-2025-54785		 CWE-20 Medium
No
No
 7.14.7 11.08.2025 SB2025081127
#VU113798 - Improper Authorization
CVE-2025-54787		 CWE-285 Medium
No
No
 7.14.7 11.08.2025 SB2025081127
#VU113797 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-54784		 CWE-79 Low
No
No
 7.14.7 11.08.2025 SB2025081127
#VU113796 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-54788		 CWE-89 Medium
No
No
 7.14.7 11.08.2025 SB2025081127
#VU113795 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-54783		 CWE-79 Low
No
No
 7.14.7 11.08.2025 SB2025081127
#VU60195 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
 CWE-89 High
No
No
 7.12.3, 8.0.2 31.01.2022 SB2022013123
#VU60194 - Deserialization of Untrusted Data
CVE-2021-45899		 CWE-502 High
No
No
 7.12.3, 8.0.2 31.01.2022 SB2022013123
#VU60193 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2021-45898		 CWE-98 High
No
No
 7.12.3, 8.0.2 31.01.2022 SB2022013123
#VU60192 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-45897		 CWE-94 High
Available
No
 7.12.3, 8.0.2 31.01.2022 SB2022013123
#VU34713 - Improper input validation
CVE-2019-18782		 CWE-20 Medium
No
No
 7.11.9 20.03.2020 SB2020032021
#VU30734 - Server-Side Request Forgery (SSRF)
CVE-2019-13335		 CWE-918 High
No
No
 7.11.7 02.10.2019 SB2019100221
#VU30735 - Improper Privilege Management
CVE-2019-14454		 CWE-269 High
No
No
 7.11.8 02.10.2019 SB2019092729
#VU30736 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-14752		 CWE-79 Low
No
No
 7.11.8 30.09.2019 SB2019092729
#VU30737 - Exposure of sensitive information to an unauthorized actor
CVE-2019-16922		 CWE-200 Medium
No
No
 7.11.8 27.09.2019 SB2019092729
#VU31044 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-12598		 CWE-89 High
No
No
 7.11.5 07.06.2019 SB2019060733
#VU31045 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-12599		 CWE-89 High
No
No
 7.11.5 07.06.2019 SB2019060733
#VU31046 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-12600		 CWE-89 High
No
No
 7.11.5 07.06.2019 SB2019060733
#VU31047 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-12601		 CWE-89 High
No
No
 7.11.5 07.06.2019 SB2019060733
#VU36032 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-6506		 CWE-89 High
No
No
 - 03.04.2019 SB2019040308
#VU31201 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-15606		 CWE-79 Low
No
No
 7.10.8 26.09.2018 SB2018092604


Showing elements 41 - 60 out of 100