Known vulnerabilities in SuiteCRM - page 4

Vendor: SalesAgility
Software: SuiteCRM
Software CPE: cpe:2.3:a:salesility:suitecrm:*:*:*:*:*:*:*:*
Website: https://salesagility.com/
Total vulnerabilities: 100
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SuiteCRM SuiteCRM is affected by 100 known vulnerabilities: 14 high, 52 medium, 34 low Critical High Medium Low

Vulnerabilities (100)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141069 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-69145		 CWE-89 Low
No
No
 7.15.2, 8.10.2 06.08.2026 SB2026080113
#VU140694 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-63213		 CWE-22 Low
No
No
 7.15.2, 8.10.2 01.08.2026 SB2026080113
#VU140693 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-63214		 CWE-89 Medium
No
No
 7.15.2, 8.10.2 01.08.2026 SB2026080113
#VU140692 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-63215		 CWE-89 Medium
No
No
 7.15.2, 8.10.2 01.08.2026 SB2026080113
#VU140691 - Server-Side Request Forgery (SSRF)
CVE-2026-63111		 CWE-918 Medium
No
No
 7.15.2, 8.10.2 01.08.2026 SB2026080113
#VU140690 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-61648		 CWE-89 Medium
No
No
 7.15.2, 8.10.2 01.08.2026 SB2026080113
#VU140689 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-61653		 CWE-89 Medium
No
No
 7.15.2, 8.10.2 01.08.2026 SB2026080113
#VU140688 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-61651		 CWE-89 Medium
No
No
 7.15.2, 8.10.2 01.08.2026 SB2026080113
#VU140687 - Server-Side Request Forgery (SSRF)
CVE-2026-61649		 CWE-918 Low
No
No
 7.15.2, 8.10.2 01.08.2026 SB2026080113
#VU140686 - Missing Authorization
CVE-2026-61650		 CWE-862 Medium
No
No
 7.15.2, 8.10.2 01.08.2026 SB2026080113
#VU140685 - Authorization Bypass Through User-Controlled Key
CVE-2026-63217		 CWE-639 Low
No
No
 7.15.2, 8.10.2 01.08.2026 SB2026080113
#VU140684 - Incorrect Authorization
CVE-2026-63218		 CWE-863 Low
No
No
 7.15.2, 8.10.2 01.08.2026 SB2026080113
#VU30328 - Insufficiently Protected Credentials
CVE-2019-18785		 CWE-522 Medium
No
No
 7.11.9 20.03.2020 SB2020032015
#VU25374 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-8786		 CWE-89 Medium
No
No
 7.10.24, 7.11.12 14.02.2020 SB2020021416
#VU25373 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-8785		 CWE-89 Medium
No
No
 7.10.24, 7.11.12 14.02.2020 SB2020021416
#VU25372 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-8784		 CWE-89 Medium
No
No
 7.10.24, 7.11.12 14.02.2020 SB2020021416
#VU25371 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-8783		 CWE-89 Medium
No
No
 7.10.24, 7.11.12 14.02.2020 SB2020021416
#VU25370 - Improper input validation
CVE-2020-8787		 CWE-20 Medium
No
No
 7.10.24, 7.11.12 14.02.2020 SB2020021416
#VU22546 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-18784		 CWE-89 High
No
No
 7.10.21, 7.11.9 06.11.2019 SB2019110636
#VU18333 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20816		 CWE-79 Medium
No
No
 7.8.24, 7.10.11 24.04.2019 SB2019040516


Showing elements 61 - 80 out of 100