salesagility vulnerabilities

CVEs per yearBy the year they were published

1. 20212
2. 20223
3. 202314
4. 202421

Newest CVEs

• CVE-2024-50335

  Authenticated XSS in "Publish Key" Field Allowing Unauthorized Administrator User Creation in SuiteCRM

  salesagility · SuiteCRM

  Medium4.9
• CVE-2024-50333

  RCE in ModuleBuilder in SuiteCRM

  salesagility · SuiteCRM

  Medium6.6
• CVE-2024-50332

  Authenticated Blind SQL Injection in DeleteRelationShip in SuiteCRM

  salesagility · SuiteCRM

  High8.8
• CVE-2024-49774

  ModuleScanner flaws in SuiteCRM

  salesagility · SuiteCRM

  High7.2
• CVE-2024-49773

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in SuiteCRM

  salesagility · SuiteCRM

  Medium5.3
• CVE-2024-49772

  Authenticated SQL injection in AM_ProjectTemplates controller in SuiteCRM

  salesagility · SuiteCRM

  High8.8
• CVE-2024-45392

  SuiteCRM has wrong deletion permission checks on API delete call

  salesagility · SuiteCRM

  High7.7
• CVE-2024-36419

  SuiteCRM-Core Host Header Injection in /legacy

  salesagility · SuiteCRM-Core

  Medium4.3
• CVE-2024-36418

  SuiteCRM authenticated RCE using connectors

  salesagility · SuiteCRM

  High8.6
• CVE-2024-36416

  SuiteCRM v4 API Excessive log data DOS

  salesagility · SuiteCRM

  High8.6