Known vulnerabilities in Vtiger CRM 4

Vendor: Vtiger
Software: Vtiger CRM
Version: 4
Software CPE: cpe:2.3:a:vtiger:vtiger_crm:*:*:*:*:*:*:*:*
Website: https://www.vtiger.com/
Total vulnerabilities: 5
Public exploits: 4
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Vtiger CRM version 4 Vtiger CRM 4 is affected by 5 vulnerabilities: 3 medium, 2 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU94630 - Improper Access Control
CVE-2024-42995		 CWE-284 Medium
Public exploit available
No
 8.2.0 22.07.2024 SB2024072201
#VU94629 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-42994		 CWE-89 Medium
Public exploit available
No
 8.2.0 22.07.2024 SB2024072201
#VU41103 - Permissions, Privileges, and Access Controls
CVE-2014-2268		 CWE-264 Medium
Public exploit available
No
 - 16.11.2014 SB2014111603
#VU42483 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2013-5091		 CWE-89 Low
Public exploit available
No
 - 04.10.2013 SB2013100403
#VU44471 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-4680		 CWE-79 Low
No
No
 - 07.12.2011 SB2011120702