Known vulnerabilities in SuiteCRM - page 4

Vendor: SalesAgility
Software: SuiteCRM
Software CPE: cpe:2.3:a:salesility:suitecrm:*:*:*:*:*:*:*:*
Website: https://salesagility.com/
Total vulnerabilities: 91
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SuiteCRM SuiteCRM is affected by 91 known vulnerabilities: 14 high, 48 medium, 29 low Critical High Medium Low

Vulnerabilities (91)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU127378 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-36406		 CWE-601 Medium
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU127379 - Improper Access Control
CVE-2024-36407		 CWE-284 Medium
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU127380 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-36410		 CWE-89 Medium
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU127381 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-36411		 CWE-89 Medium
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU127377 - Logging of Excessive Data
CVE-2024-36416		 CWE-779 High
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU127376 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2024-36417		 CWE-80 Low
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU127375 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-36418		 CWE-22 Medium
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU127374 - Server-Side Request Forgery (SSRF)
CVE-2023-6388		 CWE-918 Low
No
No
 7.14.4, 8.6.1 10.06.2024 SB20240610123
#VU60195 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
 CWE-89 High
No
No
 7.12.3, 8.0.2 31.01.2022 SB2022013123
#VU60194 - Deserialization of Untrusted Data
CVE-2021-45899		 CWE-502 High
No
No
 7.12.3, 8.0.2 31.01.2022 SB2022013123
#VU60193 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2021-45898		 CWE-98 High
No
No
 7.12.3, 8.0.2 31.01.2022 SB2022013123
#VU60192 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-45897		 CWE-94 High
Available
No
 7.12.3, 8.0.2 31.01.2022 SB2022013123
#VU30328 - Insufficiently Protected Credentials
CVE-2019-18785		 CWE-522 Medium
No
No
 7.11.9 20.03.2020 SB2020032015
#VU34713 - Improper input validation
CVE-2019-18782		 CWE-20 Medium
No
No
 7.11.9 20.03.2020 SB2020032021
#VU25374 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-8786		 CWE-89 Medium
No
No
 7.10.24, 7.11.12 14.02.2020 SB2020021416
#VU25373 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-8785		 CWE-89 Medium
No
No
 7.10.24, 7.11.12 14.02.2020 SB2020021416
#VU25372 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-8784		 CWE-89 Medium
No
No
 7.10.24, 7.11.12 14.02.2020 SB2020021416
#VU25371 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-8783		 CWE-89 Medium
No
No
 7.10.24, 7.11.12 14.02.2020 SB2020021416
#VU25370 - Improper input validation
CVE-2020-8787		 CWE-20 Medium
No
No
 7.10.24, 7.11.12 14.02.2020 SB2020021416
#VU22546 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-18784		 CWE-89 High
No
No
 7.10.21, 7.11.9 06.11.2019 SB2019110636


Showing elements 61 - 80 out of 91