Known vulnerabilities in SuiteCRM - page 5

Vendor: SalesAgility
Software: SuiteCRM
Software CPE: cpe:2.3:a:salesility:suitecrm:*:*:*:*:*:*:*:*
Website: https://salesagility.com/
Total vulnerabilities: 100
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SuiteCRM SuiteCRM is affected by 100 known vulnerabilities: 14 high, 52 medium, 34 low Critical High Medium Low

Vulnerabilities (100)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU162640 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-100365		 CWE-89 Medium
No
No
 7.15.2, 8.10.2 09.11.2026 SB2026080113
#VU162639 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-100359		 CWE-89 Low
No
No
 7.15.2, 8.10.2 09.11.2026 SB2026080113
#VU162638 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-97377		 CWE-89 Medium
No
No
 7.15.2, 8.10.2 09.11.2026 SB2026080113
#VU162637 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-100358		 CWE-94 Low
No
No
 7.15.2, 8.10.2 09.11.2026 SB2026080113
#VU162636 - Observable Response Discrepancy
CVE-2026-100362		 CWE-204 Medium
No
No
 7.15.2, 8.10.2 09.11.2026 SB2026080113
#VU154188 - Missing Authorization
CVE-2026-100363		 CWE-862 Medium
No
No
 7.15.2, 8.10.2 13.10.2026 SB2026080113
#VU154187 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-100361		 CWE-915 Low
No
No
 7.15.2, 8.10.2 13.10.2026 SB2026080113
#VU154186 - Missing Authorization
CVE-2026-100360		 CWE-862 Low
No
No
 7.15.2, 8.10.2 13.10.2026 SB2026080113
#VU154185 - Authorization Bypass Through User-Controlled Key
CVE-2026-100364		 CWE-639 Low
No
No
 7.15.2, 8.10.2 13.10.2026 SB2026080113
#VU144297 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-71550		 CWE-98 Medium
No
No
 7.15.2, 8.10.2 19.08.2026 SB2026080113
#VU144296 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-71548		 CWE-89 Medium
No
No
 7.15.2, 8.10.2 19.08.2026 SB2026080113
#VU141078 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-69134		 CWE-89 Medium
No
No
 7.15.2, 8.10.2 06.08.2026 SB2026080113
#VU141077 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-69135		 CWE-89 Low
No
No
 7.15.2, 8.10.2 06.08.2026 SB2026080113
#VU141076 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-69136		 CWE-89 Low
No
No
 7.15.2, 8.10.2 06.08.2026 SB2026080113
#VU141075 - Server-Side Request Forgery (SSRF)
CVE-2026-69137		 CWE-918 Low
No
No
 7.15.2, 8.10.2 06.08.2026 SB2026080113
#VU141074 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-69142		 CWE-89 Medium
No
No
 7.15.2, 8.10.2 06.08.2026 SB2026080113
#VU141073 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-69140		 CWE-89 Medium
No
No
 7.15.2, 8.10.2 06.08.2026 SB2026080113
#VU141072 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-69141		 CWE-89 Medium
No
No
 7.15.2, 8.10.2 06.08.2026 SB2026080113
#VU141071 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-69143		 CWE-89 Medium
No
No
 7.15.2, 8.10.2 06.08.2026 SB2026080113
#VU141070 - Authorization Bypass Through User-Controlled Key
CVE-2026-69144		 CWE-639 Low
No
No
 7.15.2, 8.10.2 06.08.2026 SB2026080113


Showing elements 81 - 100 out of 100