Vendors / 5kcrm Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 0
Exploited now 5kcrm records in CISA KEV No 5kcrm vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
An issue in WuKongOpenSource WukongCRM v.72crm_9.0.1_20191202 allows a remote attacker to execute arbitrary code via the parseObject() function in the fastjson component.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04912 · Published 2024-02-01 · No fix listed CWE-502
Priority MEDIUM 63
A vulnerability was found in WuKongOpenSource WukongCRM 9.0.
CVSS 4.0 MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.0033 · Published 2025-06-03 · No fix listed CWE-352
Priority MEDIUM 62
WukongCRM-9.0-JAVA was discovered to contain a fastjson deserialization vulnerability via the /OaExamine/setOaExamine interface.
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00361 · Published 2025-10-08 · No fix listed CWE-502
Priority MEDIUM 57
A security flaw has been discovered in WuKongOpenSource WukongCRM up to 11.3.3.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00405 · Published 2026-02-08 · No fix listed CWE-266
Priority MEDIUM 57
A vulnerability was identified in WuKongOpenSource WukongCRM 11.0.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00399 · Published 2025-08-11 · No fix listed CWE-200
Open these records in search → All records by CVSS severity
1 0 4 0 0
