SugarCRM

Records70All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high43CVSS 7.0–8.9

Exploited now

SugarCRM records in CISA KEV

TI-2023-09083 Multiple SugarCRM Products Remote Code Execution Vulnerability CRITICAL 97KEV 2023-02-02

Components

Products in the NVD configurations · select one to filter the records

Sugarcrm 63 records CRITICAL Sugar Suite 3 records LOW Sugar Sales 2 records MEDIUM

Records

3 records in Sugar Suite · all components

TI-2005-03875 CVE-2005-4087 · GHSA-xqrv-hxv4-28ph

PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source…

LOW 39

PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and earlier allows remote attackers to execute arbitrary PHP code via a URL in th…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0373 Published 2005-12-08 No fix listed

TI-2006-04898 CVE-2006-5082 · GHSA-4cjv-hchw-rq37

Unspecified vulnerability in Sugar Suite Open Source (SugarCRM) before 4.2.1 Patch C…

LOW 37

Unspecified vulnerability in Sugar Suite Open Source (SugarCRM) before 4.2.1 Patch C (20060917) has unspecified impact, related to code execution, and unspecified attack vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02216 Published 2006-09-29 No fix listed

TI-2005-03874 CVE-2005-4086 · GHSA-9vpc-3ghg-r29c

Directory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source…

LOW 33

Directory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and earlier allows remote attackers to include arbitrary local files via ".." sequenc…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07328 Published 2005-12-08 No fix listed

Open these records in search →

Critical	7
High	43
Medium	20
Low	0
No CVSS	0