Log in Start free

salesagility

Products

ProductCVEsExploitedLatest
SuiteCRM22–Nov 5, 2024
salesagility/suitecrm14–Nov 14, 2023
salesagility/suitecrm-core2–Jul 11, 2023
SuiteCRM-Core2–Jun 10, 2024

Exploited and recent CVEs

  • CVE-2024-50335 Medium 4.9 Authenticated XSS in "Publish Key" Field Allowing Unauthorized Administrator User Creation in SuiteCRM 0.3%
  • CVE-2024-50333 Medium 6.6 RCE in ModuleBuilder in SuiteCRM 0.4%
  • CVE-2024-50332 High 8.8 Authenticated Blind SQL Injection in DeleteRelationShip in SuiteCRM 0.4%
  • CVE-2024-49774 High 7.2 ModuleScanner flaws in SuiteCRM 0.5%
  • CVE-2024-49773 Medium 5.3 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in SuiteCRM 0.3%
  • CVE-2024-49772 High 8.8 Authenticated SQL injection in AM_ProjectTemplates controller in SuiteCRM 0.4%
  • CVE-2024-45392 High 7.7 SuiteCRM has wrong deletion permission checks on API delete call 0.3%
  • CVE-2024-36419 Medium 4.3 SuiteCRM-Core Host Header Injection in /legacy 0.2%
  • CVE-2024-36418 High 8.6 SuiteCRM authenticated RCE using connectors 0.8%
  • CVE-2024-36416 High 8.6 SuiteCRM v4 API Excessive log data DOS 2.0%
  • CVE-2024-36417 Medium 5.7 SuiteCRM Stored XSS Vulnerability Allows Code Execution via Malicious iFrame 0.4%
  • CVE-2024-36415 Critical 9.1 SuiteCRM Improper Control of Filename for Include Statement in PHP and Unrestricted Upload of File with Dangerous content leads to authenticated remote code execution 0.9%
  • CVE-2024-36414 High 7.7 SuiteCRM authenticated Server-Side Request Forgery 0.4%
  • CVE-2024-36413 High 8.9 SuiteCRM authenticated Reflected Cross-Site Scripting 0.3%
  • CVE-2024-36412 Critical 10.0 SuiteCRM unauthenticated SQL Injection 5.7%
  • CVE-2024-36411 Critical 9.6 SuiteCRM authenticated SQL Injection in EmailUIAjax displayView controller 0.4%
  • CVE-2024-36410 Critical 9.6 SuiteCRM authenticated SQL Injection in EmailUIAjax messages count controller 0.4%
  • CVE-2024-36409 Critical 9.6 SuiteCRM authenticated SQL Injection in TreeData entrypoint 0.4%
  • CVE-2024-36408 Critical 9.6 SuiteCRM authenticated SQL Injection in Alerts 0.5%
  • CVE-2024-36407 Low 3.7 SuiteCRM unauthenticated user password reset on php7 0.3%
  • CVE-2024-36406 Medium 5.4 SuiteCRM vulnerable to open redirects 0.3%
  • CVE-2023-47643 Low 3.1 SuiteCRM has Unauthenticated Graphql Introspection Enabled 3.0%
  • CVE-2023-6131 High 7.2 Code Injection in salesagility/suitecrm 1.0%
  • CVE-2023-6130 High 7.5 Path Traversal: '\..\filename' in salesagility/suitecrm 1.0%
  • CVE-2023-6128 Medium 6.8 Cross-site Scripting (XSS) - Reflected in salesagility/suitecrm 0.6%
  • CVE-2023-6127 Medium 5.4 Unrestricted Upload of File with Dangerous Type in salesagility/suitecrm 0.4%
  • CVE-2023-6126 Medium 4.3 Code Injection in salesagility/suitecrm 0.7%
  • CVE-2023-6125 Medium 5.4 Code Injection in salesagility/suitecrm 0.8%
  • CVE-2023-6124 Medium 5.0 Server-Side Request Forgery (SSRF) in salesagility/suitecrm 0.5%
  • CVE-2023-5353 High 8.1 Improper Access Control in salesagility/suitecrm 0.7%