SugarCRM

Records70All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high43CVSS 7.0–8.9

Exploited now

SugarCRM records in CISA KEV

TI-2023-09083 Multiple SugarCRM Products Remote Code Execution Vulnerability CRITICAL 97KEV 2023-02-02

Components

Products in the NVD configurations · select one to filter the records

Sugarcrm 63 records CRITICAL Sugar Suite 3 records LOW Sugar Sales 2 records MEDIUM

Records

2 records in Sugar Sales · all components

TI-2004-01120 CVE-2004-1227 · GHSA-gfv8-v4p2-qcf9

Directory traversal vulnerability in SugarCRM Sugar Sales 2.0.1c and earlier allows…

MEDIUM 50

Directory traversal vulnerability in SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to read arbitrary files and possibly execute arbitrary PHP code via ..

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04155 Published 2004-12-15 No fix listed

TI-2004-01121 CVE-2004-1228 · GHSA-qwhf-v44r-h4m2

The install scripts in SugarCRM Sugar Sales 2.0.1c and earlier are not removed after…

LOW 31

The install scripts in SugarCRM Sugar Sales 2.0.1c and earlier are not removed after installation, which allows attackers to obtain the MySQL administrative password in cleartext from an installation form, or to cause a…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01164 Published 2004-12-15 No fix listed

Open these records in search →

Critical	7
High	43
Medium	20
Low	0
No CVSS	0