Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: salesagility/suitecrm 7.14.2, 7.12.14, 8.4.2 Clear all filters
TI-2023-05636 CVE-2023-6131 · GHSA-g72v-3gfv-88x3

Code Injection in salesagility/suitecrm

Priority HIGH 73

Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01003 Published 2023-11-14 Fixed in 7.14.2, 7.12.14 +1 CWE-94
TI-2023-05635 CVE-2023-6130 · GHSA-v83h-65mx-qff4

Path Traversal: '\..\filename' in salesagility/suitecrm

Priority MEDIUM 42

Path Traversal: '\..\filename' in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00963 Published 2023-11-14 Fixed in 7.14.2, 7.12.14 +1 CWE-29
TI-2023-05633 CVE-2023-6128 · GHSA-xgv3-h5gf-43h8

Cross-site Scripting (XSS) - Reflected in salesagility/suitecrm

Priority LOW 27

Cross-site Scripting (XSS) - Reflected in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00582 Published 2023-11-14 Fixed in 7.14.2, 7.12.14 +1 CWE-79
TI-2023-05631 CVE-2023-6126 · GHSA-q79g-vm3j-m2fc

Code Injection in salesagility/suitecrm

Priority MEDIUM 43

Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00686 Published 2023-11-14 Fixed in 7.14.2, 7.12.14 +1 CWE-94
TI-2023-05630 CVE-2023-6125 · GHSA-xjm4-p3wm-qfm9

Code Injection in salesagility/suitecrm

Priority MEDIUM 40

Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00809 Published 2023-11-14 Fixed in 7.14.2, 7.12.14 +1 CWE-94