Known vulnerabilities in SuiteCRM - page 3

Vendor: SalesAgility
Software: SuiteCRM
Software CPE: cpe:2.3:a:salesility:suitecrm:*:*:*:*:*:*:*:*
Website: https://salesagility.com/
Total vulnerabilities: 91
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SuiteCRM SuiteCRM is affected by 91 known vulnerabilities: 14 high, 48 medium, 29 low Critical High Medium Low

Vulnerabilities (91)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU127397 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-64488		 CWE-89 Medium
No
No
 7.14.8, 8.9.1 24.04.2026 SB2026042404
#VU127394 - Improper Access Control
CVE-2025-64490		 CWE-284 Medium
No
No
 7.14.8, 8.9.1 24.04.2026 SB2026042404
#VU113799 - Improper input validation
CVE-2025-54785		 CWE-20 Medium
No
No
 7.14.7 11.08.2025 SB2025081127
#VU113798 - Improper Authorization
CVE-2025-54787		 CWE-285 Medium
No
No
 7.14.7 11.08.2025 SB2025081127
#VU113797 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-54784		 CWE-79 Low
No
No
 7.14.7 11.08.2025 SB2025081127
#VU113796 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-54788		 CWE-89 Medium
No
No
 7.14.7 11.08.2025 SB2025081127
#VU113795 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-54783		 CWE-79 Low
No
No
 7.14.7 11.08.2025 SB2025081127
#VU127389 - Improper input validation
CVE-2024-49774		 CWE-20 Low
No
No
 7.14.6, 8.7.1 05.11.2024 SB20241105111
#VU127392 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-49772		 CWE-89 Medium
No
No
 7.14.6, 8.7.1 05.11.2024 SB20241105111
#VU127390 - Improper input validation
CVE-2024-50333		 CWE-20 Low
No
No
 7.14.6, 8.7.1 05.11.2024 SB20241105111
#VU127388 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-50332		 CWE-89 Medium
No
No
 7.14.6, 8.7.1 05.11.2024 SB20241105111
#VU127391 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-49773		 CWE-89 Low
No
No
 7.14.6, 8.7.1 05.11.2024 SB20241105111
#VU127393 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-50335		 CWE-79 Low
No
No
 7.14.6, 8.7.1 05.11.2024 SB20241105111
#VU127373 - Improper Access Control
CVE-2024-45392		 CWE-284 Low
No
No
 7.14.5, 8.6.2 05.09.2024 SB20240905116
#VU127382 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-36408		 CWE-89 Medium
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU127383 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-36409		 CWE-89 Medium
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU127384 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-36412		 CWE-89 High
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU127385 - Improper Neutralization of Alternate XSS Syntax
CVE-2024-36413		 CWE-87 Medium
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU127386 - Server-Side Request Forgery (SSRF)
CVE-2024-36414		 CWE-918 Low
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU127387 - Unrestricted Upload of File with Dangerous Type
CVE-2024-36415		 CWE-434 Low
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123


Showing elements 41 - 60 out of 91