salesagility SuiteCRM

• CVE-2024-50335 Medium 4.9 Authenticated XSS in "Publish Key" Field Allowing Unauthorized Administrator User Creation in SuiteCRM 0.3%
• CVE-2024-50333 Medium 6.6 RCE in ModuleBuilder in SuiteCRM 0.4%
• CVE-2024-50332 High 8.8 Authenticated Blind SQL Injection in DeleteRelationShip in SuiteCRM 0.4%
• CVE-2024-49774 High 7.2 ModuleScanner flaws in SuiteCRM 0.5%
• CVE-2024-49773 Medium 5.3 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in SuiteCRM 0.3%
• CVE-2024-49772 High 8.8 Authenticated SQL injection in AM_ProjectTemplates controller in SuiteCRM 0.4%
• CVE-2024-45392 High 7.7 SuiteCRM has wrong deletion permission checks on API delete call 0.3%
• CVE-2024-36418 High 8.6 SuiteCRM authenticated RCE using connectors 0.8%
• CVE-2024-36416 High 8.6 SuiteCRM v4 API Excessive log data DOS 2.0%
• CVE-2024-36417 Medium 5.7 SuiteCRM Stored XSS Vulnerability Allows Code Execution via Malicious iFrame 0.4%
• CVE-2024-36415 Critical 9.1 SuiteCRM Improper Control of Filename for Include Statement in PHP and Unrestricted Upload of File with Dangerous content leads to authenticated remote code execution 0.9%
• CVE-2024-36414 High 7.7 SuiteCRM authenticated Server-Side Request Forgery 0.4%
• CVE-2024-36413 High 8.9 SuiteCRM authenticated Reflected Cross-Site Scripting 0.3%
• CVE-2024-36412 Critical 10.0 SuiteCRM unauthenticated SQL Injection 5.7%
• CVE-2024-36411 Critical 9.6 SuiteCRM authenticated SQL Injection in EmailUIAjax displayView controller 0.4%
• CVE-2024-36410 Critical 9.6 SuiteCRM authenticated SQL Injection in EmailUIAjax messages count controller 0.4%
• CVE-2024-36409 Critical 9.6 SuiteCRM authenticated SQL Injection in TreeData entrypoint 0.4%
• CVE-2024-36408 Critical 9.6 SuiteCRM authenticated SQL Injection in Alerts 0.5%
• CVE-2024-36407 Low 3.7 SuiteCRM unauthenticated user password reset on php7 0.3%
• CVE-2024-36406 Medium 5.4 SuiteCRM vulnerable to open redirects 0.3%
• CVE-2021-25960 High 8.0 SuiteCRM - CSV Injection in Accounts Module 1.2%
• CVE-2021-25961 High 8.0 SuiteCRM - Account Takeover in Password Reset Functionality 1.0%