espocrm

Records65All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high12CVSS 7.0–8.9

Exploited now

espocrm records in CISA KEV

No espocrm vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Espocrm 40 records HIGH

Records

65 records

TI-2020-19229 CVE-2020-37094 · GHSA-wcm6-243c-86f3

EspoCRM 5.7.0 < 5.9.0 - Two-Factor Authentication Bypass via Auth Token Reuse Between Accounts with Identical Passwords

HIGH 78

EspoCRM 5.7.0 prior to 5.9.0 contains an authentication token reuse vulnerability that allows authenticated attackers to bypass two-factor authentication by exploiting token-to-password-hash mapping in application/Espo/C…

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00525 Published 2026-02-03 Fixed in 5.9.0 CWE-303

TI-2026-26036 CVE-2026-33656

Path traversal in espocrm

HIGH 74

EspoCRM is an open source customer relationship management application.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.005 Published 2026-04-22 Fixed in 9.3.4 CWE-22

TI-2025-32670 CVE-2025-52575

EspoCRM vulnerable to LDAP Injection through Improper Neutralization of Special Elements

HIGH 68

EspoCRM is an Open Source CRM (Customer Relationship Management) software.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00776 Published 2025-07-21 Fixed in 9.1.7 CWE-90

TI-2026-26112 CVE-2026-33733

EspoCRM has Admin TemplateManager path traversal that allows arbitrary file read write and delete

HIGH 67

EspoCRM is an open source customer relationship management application.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00448 Published 2026-04-22 Fixed in 9.3.4 CWE-23

TI-2025-23468 CVE-2025-32390

EspoCRM vulnerable to HTML Injection into phishing, which may lead to account takeover

HIGH 66

EspoCRM is a free, open-source customer relationship management platform.

CVSS 4.0HIGH 7.0 Network Low privileges User interaction EPSS 0.00382 Published 2025-05-12 Fixed in 9.0.8 CWE-74

TI-2026-26120 CVE-2026-33741

EspoCRM: Stored XSS via SVG attachment loading same-origin JavaScript

MEDIUM 63

EspoCRM is an open source customer relationship management application.

CVSS 3.1MEDIUM 6.8 Network Low privileges User interaction EPSS 0.00211 Published 2026-05-19 Fixed in 9.3.4 CWE-79

TI-2026-29769 CVE-2026-41141

EspoCRM: IDOR in EmailTemplate Prepare Endpoint Leaks Entity Data via Email Address Lookup

MEDIUM 62

EspoCRM is an open source customer relationship management application.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00346 Published 2026-05-28 Fixed in 9.3.5 CWE-639

TI-2024-16335 CVE-2024-24818

EspoCRM weakness in "Forgot password"

MEDIUM 60

EspoCRM is an Open Source Customer Relationship Management software.

CVSS 3.1MEDIUM 5.9 Adjacent network No auth User interaction EPSS 0.00615 Published 2024-02-29 Fixed in 8.1.2 CWE-610

TI-2026-26119 CVE-2026-33740

EspoCRM: Email importEml can import and delete another user's attachment by raw fileId

MEDIUM 58

EspoCRM is an open source customer relationship management application.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00211 Published 2026-04-13 Fixed in 9.3.4 CWE-639

TI-2026-26037 CVE-2026-33657

EspoCRM: Stored HTML injection in email notifications about stream notes via unescaped post field

MEDIUM 58

EspoCRM is an open source customer relationship management application.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00176 Published 2026-04-13 Fixed in 9.3.4 CWE-116

TI-2025-36980 CVE-2025-59428

EspoCRM allows arbitrary user creation via stored SVG injection and CSRF

MEDIUM 58

EspoCRM is an open source customer relationship management application.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00145 Published 2025-10-14 Fixed in 9.1.9 CWE-352

TI-2026-29786 CVE-2026-41160

EspoCRM: Broken Access Control / IDOR in Note Pinning API allows unauthorized modification of notes

MEDIUM 53

EspoCRM is an open source customer relationship management application.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00292 Published 2026-05-28 Fixed in 9.3.5 CWE-284

TI-2026-25927 CVE-2026-33534

EspoCRM has authenticated SSRF via internal-host validation bypass using alternative IPv4 notation

MEDIUM 53

EspoCRM is an open source customer relationship management application.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01978 Published 2026-04-13 Fixed in 9.3.4 CWE-918

TI-2025-23826 CVE-2025-32789

EspoCRM Allows Potential Disclosure of Sensitive Information in the User Sorting Function

MEDIUM 51

EspoCRM is an Open Source Customer Relationship Management software.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00428 Published 2025-04-16 Fixed in 9.0.7 CWE-200

TI-2014-06634 CVE-2014-7985 · GHSA-xmx2-q3rp-q8fq

Directory traversal vulnerability in EspoCRM before 2.6.0 allows remote attackers to…

MEDIUM 51

Directory traversal vulnerability in EspoCRM before 2.6.0 allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05026 Published 2014-10-31 No fix listed CWE-22

TI-2026-26039 CVE-2026-33659

EspoCRM: SSRF via DNS Rebinding in Attachment fromImageUrl Endpoint Allows Internal Network Access

MEDIUM 50

EspoCRM is an open source customer relationship management application.

CVSS 3.1LOW 3.5 Network Low privileges No interaction EPSS 0.00333 Published 2026-04-13 Fixed in 9.3.4 CWE-367

TI-2026-82174 CVE-2026-118686 · GHSA-jv3j-8935-75r6

EspoCRM Unauthenticated Denial of Service via Password-Redaction Regex

MEDIUM 44

EspoCRM before 9.3.11 and 10.x before 10.0.8 contains a denial of service vulnerability in which the password-redaction regular expression applied during API error handling consumes excessive CPU on long request bodies.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00347 Published 2026-10-28 Fixed in 10.0.8, 9.3.11 CWE-1333

TI-2026-74787 CVE-2026-47168

Unsafe PHP deserialization in EspoCRM allows remote code execution

MEDIUM 42

EspoCRM is an open source customer relationship management application.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00423 Published 2026-10-15 Fixed in 9.3.7 CWE-502

TI-2022-18314 CVE-2022-38843 · GHSA-9hh7-36j4-5fcg

EspoCRM version 7.1.8 is vulnerable to Unrestricted File Upload allowing attackers to…

MEDIUM 41

EspoCRM version 7.1.8 is vulnerable to Unrestricted File Upload allowing attackers to upload malicious file with any extension to the server.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01348 Published 2022-09-16 No fix listed CWE-434

TI-2019-10695 CVE-2019-14351 · GHSA-rrqw-j89v-qc52

EspoCRM 5.6.4 is vulnerable to user password hash enumeration.

MEDIUM 41

EspoCRM 5.6.4 is vulnerable to user password hash enumeration.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01263 Published 2019-07-28 No fix listed CWE-307

TI-2026-61798 CVE-2026-90934 · GHSA-w9v2-8542-444h

EspoCRM before 10.0.4 Field-level Security Bypass via Attendees

LOW 39

EspoCRM before 10.0.4 contains a field-level security bypass vulnerability in the meeting and call attendees endpoints that allows authenticated users to read restricted email addresses.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00305 Published 2026-09-14 Fixed in 10.0.4 CWE-863

TI-2022-18315 CVE-2022-38844 · GHSA-pvj2-28fw-3gc8

CSV Injection in Create Contacts in EspoCRM 7.1.8 allows remote authenticated users to…

LOW 38

CSV Injection in Create Contacts in EspoCRM 7.1.8 allows remote authenticated users to run system commands via creating contacts with payloads capable of executing system commands.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.01369 Published 2022-09-16 No fix listed CWE-1236

TI-2026-60280 CVE-2026-88896 · GHSA-p98c-469w-949w

EspoCRM before 10.0.4 SSRF via IPv6 Transition Address Bypass

LOW 37

EspoCRM before 10.0.4 is vulnerable to server-side request forgery.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00371 Published 2026-09-10 Fixed in 10.0.4 CWE-918

TI-2023-05497 CVE-2023-5966 · GHSA-7wx4-fjq2-2hjg

Unrestricted Upload of File with Dangerous Type in EspoCRM

LOW 36

An authenticated privileged attacker could upload a specially crafted zip to the EspoCRM server in version 7.2.5, via the extension deployment form, which could lead to arbitrary PHP code execution.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0104 Published 2023-11-30 No fix listed CWE-434

TI-2023-05496 CVE-2023-5965 · GHSA-92xg-872w-r5g2

Unrestricted Upload of File with Dangerous Type in EspoCRM

LOW 36

An authenticated privileged attacker could upload a specially crafted zip to the EspoCRM server in version 7.2.5, via the update form, which could lead to arbitrary PHP code execution.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0104 Published 2023-11-30 No fix listed CWE-434

Open these records in search →