Priority MEDIUM 64
SuiteCRM 7.10.7 contains a time-based SQL injection vulnerability in the record parameter of the Users module DetailView action that allows authenticated attackers to manipulate database queries.
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00356 · Published 2026-04-05 · No fix listed CWE-89
Priority MEDIUM 64
SuiteCRM 7.10.7 contains a SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the parentTab parameter.
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00356 · Published 2026-04-05 · No fix listed CWE-89
Priority MEDIUM 62
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0035 · Published 2025-11-08 · Fixed in 8.9.1 CWE-89
Priority MEDIUM 40
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00367 · Published 2025-11-08 · Fixed in 8.9.1 CWE-89
Priority MEDIUM 60
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0021 · Published 2025-11-08 · Fixed in 7.14.8 CWE-79
Priority LOW 38
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.
CVSS 3.1HIGH 8.3· Network · Low privileges · No interaction · EPSS 0.00284 · Published 2025-11-08 · Fixed in 7.14.8, 8.9.1 CWE-863
Priority MEDIUM 40
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00362 · Published 2025-11-08 · Fixed in 7.14.8, 8.9.1 CWE-269
Priority MEDIUM 46
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.
CVSS 4.0HIGH 8.6· Network · Low privileges · No interaction · EPSS 0.0046 · Published 2025-11-07 · Fixed in 8.9.1, 7.14.8 CWE-89
Priority MEDIUM 44
SuiteCRM versions prior to 7.12.6 contain a type confusion vulnerability within the processing of the ‘module’ parameter within the ‘deleteAttachment’ functionality.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00389 · Published 2025-11-06 · Fixed in 7.12.6 CWE-843
Priority MEDIUM 49
SuiteCRM versions prior to 7.12.6 contain a SQL injection vulnerability within the processing of the ‘uid’ parameter within the ‘export’ functionality.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00689 · Published 2025-11-06 · Fixed in 7.12.6 CWE-89
Priority LOW 23
Cross-Site Scripting (XSS) vulnerability reflected in SuiteCRM v7.14.1.
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00194 · Published 2025-10-27 · No fix listed CWE-79
Priority LOW 17
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.00266 · Published 2025-08-07 · Fixed in 7.14.7 CWE-285
Priority LOW 39
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.
CVSS 4.0HIGH 8.6· Network · No auth · User interaction · EPSS 0.00245 · Published 2025-08-07 · Fixed in 7.14.7 CWE-79
Priority LOW 23
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00245 · Published 2025-08-07 · Fixed in 7.14.7 CWE-79
Priority MEDIUM 41
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00482 · Published 2025-08-06 · Fixed in 7.14.7 CWE-89
Priority LOW 30
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00316 · Published 2025-08-06 · Fixed in 8.8.1, 7.14.7 CWE-200
Priority MEDIUM 40
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00435 · Published 2025-08-06 · Fixed in 7.14.7, 8.8.1 CWE-20
Priority HIGH 70
An issue was discovered in SuiteCRM 7.12.7.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00569 · Published 2025-01-07 · No fix listed
Priority HIGH 73
An issue was discovered in SuiteCRM 7.12.7.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01169 · Published 2025-01-07 · No fix listed CWE-502
Priority LOW 26
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.0034 · Published 2024-11-05 · Fixed in 7.14.6, 8.7.1 CWE-79
Priority MEDIUM 40
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00402 · Published 2024-11-05 · Fixed in 7.14.6, 8.7.1 CWE-20
Priority MEDIUM 40
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00448 · Published 2024-11-05 · Fixed in 7.14.6, 8.7.1 CWE-89
Priority LOW 34
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00502 · Published 2024-11-05 · Fixed in 7.14.6, 8.7.1 CWE-20
Priority LOW 29
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00303 · Published 2024-11-05 · Fixed in 7.14.6, 8.7.1 CWE-89
Priority MEDIUM 40
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00448 · Published 2024-11-05 · Fixed in 7.14.6, 8.7.1 CWE-89
Load more
THREATIST.IORead the docs