CVE-2021-45899

CRITICAL 9.8CVE-2021-45899 · Published 28/01/2022 · updated 17/06/2026

In short

CVE-2021-45899 is a CRITICAL (CVSS 9.8) vulnerability affecting suitecrm (salesagility).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.4% of all vulnerabilities.
Fix: update to 8.0.2, 7.12.3 or later.

Package	Affected versions	Patched versions
suitecrm salesagility	`= 8.0≥ 8.0.0, < 8.0.2< 7.12.3`	`8.0.27.12.3`

SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows PHAR deserialization that can lead to remote code execution.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

= 8.0≥ 8.0.0, < 8.0.2< 7.12.3

8.0.27.12.3

More vulnerabilities in suitecrm

See all →