CVE-2024-36410

HIGH 8.8CVE-2024-36410 · Published 10/06/2024 · updated 17/06/2026

In short

CVE-2024-36410 is a HIGH (CVSS 8.8) vulnerability affecting suitecrm (salesagility).
Chance of exploitation in the next 30 days (EPSS): 0.42%, higher than 36.1% of all vulnerabilities.
Fix: update to 8.6.1, 7.14.4 or later.

Package	Affected versions	Patched versions
suitecrm salesagility	`≥ 8.0.0, < 8.6.1< 7.14.4`	`8.6.17.14.4`

Description

SuiteCRM is an open-source Customer Relationship Management (CRM) software application. In versions prior to 7.14.4 and 8.6.1, poor input validation allows for SQL Injection in EmailUIAjax messages count controller. Versions 7.14.4 and 8.6.1 contain a fix for this issue.

References

salesagility/SuiteCRM security advisory · Third Party Advisory

More vulnerabilities in suitecrm

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

suitecrm

salesagility

≥ 8.0.0, < 8.6.1< 7.14.4

8.6.17.14.4

More vulnerabilities in suitecrm

See all →