Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

105 records

Vendor: salesagility Clear all filters
TI-2019-15717 CVE-2019-25664 · GHSA-hmmj-f3hm-rx3f

SuiteCRM 7.10.7 SQL Injection via record Parameter

Priority MEDIUM 64

SuiteCRM 7.10.7 contains a time-based SQL injection vulnerability in the record parameter of the Users module DetailView action that allows authenticated attackers to manipulate database queries.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00356 Published 2026-04-05 No fix listed CWE-89
TI-2019-15716 CVE-2019-25663 · GHSA-hrmj-mfh9-v52r

SuiteCRM 7.10.7 SQL Injection via parentTab Parameter

Priority MEDIUM 64

SuiteCRM 7.10.7 contains a SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the parentTab parameter.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00356 Published 2026-04-05 No fix listed CWE-89
TI-2022-26064 CVE-2022-50590 · GHSA-c9hp-6rxj-h2wx

SuiteCRM < 7.12.6 Type Confusion via 'deleteAttachment' Functionality

Priority MEDIUM 44

SuiteCRM versions prior to 7.12.6 contain a type confusion vulnerability within the processing of the ‘module’ parameter within the ‘deleteAttachment’ functionality.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00389 Published 2025-11-06 Fixed in 7.12.6 CWE-843
TI-2022-26063 CVE-2022-50589 · GHSA-wj94-phrx-4jq9

SuiteCRM < 7.12.6 SQL Injection via 'export' Functionality

Priority MEDIUM 49

SuiteCRM versions prior to 7.12.6 contain a SQL injection vulnerability within the processing of the ‘uid’ parameter within the ‘export’ functionality.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00689 Published 2025-11-06 Fixed in 7.12.6 CWE-89
TI-2025-27565 CVE-2025-41384 · GHSA-8fj6-mjp4-3gc3

Reflected Cross-Site Scripting (XSS) in SuiteCRM

Priority LOW 23

Cross-Site Scripting (XSS) vulnerability reflected in SuiteCRM v7.14.1.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00194 Published 2025-10-27 No fix listed CWE-79
TI-2022-22252 CVE-2022-45185 · GHSA-qjmp-rfrj-7cv5

An issue was discovered in SuiteCRM 7.12.7.

Priority HIGH 73

An issue was discovered in SuiteCRM 7.12.7.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01169 Published 2025-01-07 No fix listed CWE-502
TI-2024-33768 CVE-2024-50333

RCE in ModuleBuilder in SuiteCRM

Priority MEDIUM 40

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00402 Published 2024-11-05 Fixed in 7.14.6, 8.7.1 CWE-20
TI-2024-33241 CVE-2024-49774

ModuleScanner flaws in SuiteCRM

Priority LOW 34

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00502 Published 2024-11-05 Fixed in 7.14.6, 8.7.1 CWE-20
Load more