SugarCRM
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| SugarCRM | 2 | – | Jul 13, 2025 |
Exploited and recent CVEs
- CVE-2024-58258 SugarCRM before 13.0.4 and 14.x before 14.0.1 allows SSRF in the API module because a limited type of code injection can occur. 22.4%
- CVE-2025-25034 SugarCRM PHP Deserialization RCE 5.0%