Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

71 records

Vendor: SuiteCRM Clear all filters
TI-2026-85598 CVE-2026-100365

SQL injection in SuiteCRM AOR Reports ORDER BY clause

Priority MEDIUM 40

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00441 Published 2026-11-05 Fixed in 7.15.2, 8.10.2 CWE-89
TI-2026-85570 CVE-2026-69145

SQL injection in SuiteCRM AOR Reports field values

Priority LOW 28

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0026 Published 2026-11-05 Fixed in 7.15.2, 8.10.2 CWE-89
TI-2026-85569 CVE-2026-69144

Authorization bypass in SuiteCRM document downloads

Priority LOW 29

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00314 Published 2026-11-05 Fixed in 7.15.2, 8.10.2 CWE-639
TI-2026-85554 CVE-2026-61648

SQL injection in SuiteCRM Multi report conditions

Priority LOW 36

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.00247 Published 2026-11-05 Fixed in 7.15.2, 8.10.2 CWE-89
Load more