CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CVE-2019-17304 |
| HIGH7.2 |
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by an Admin user. |
| 07/10/2019 |
| CVE-2019-17303 | HIGH8.8 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by a Developer user. | 07/10/2019 |
| CVE-2019-17302 | HIGH8.8 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the ModuleBuilder module by a Developer user. | 07/10/2019 |
| CVE-2019-17301 | HIGH7.2 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the ModuleBuilder module by an Admin user. | 07/10/2019 |
| CVE-2019-17300 | HIGH8.8 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Administration module by a Developer user. | 07/10/2019 |
| CVE-2019-17299 | HIGH7.2 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Administration module by an Admin user. | 07/10/2019 |
| CVE-2019-17298 | HIGH8.8 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Administration module by a Developer user. | 07/10/2019 |
| CVE-2019-17297 | HIGH8.8 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Quotes module by a Regular user. | 07/10/2019 |
| CVE-2019-17296 | HIGH8.8 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Contacts module by a Regular user. | 07/10/2019 |
| CVE-2019-17295 | HIGH8.8 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the history function by a Regular user. | 07/10/2019 |
| CVE-2019-17294 | HIGH8.8 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the export function by a Regular user. | 07/10/2019 |
| CVE-2019-17293 | HIGH8.8 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmse_Project module by a Regular user. | 07/10/2019 |
| CVE-2019-17292 | HIGH7.2 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmse_Inbox module by an Admin user. | 07/10/2019 |
| CVE-2019-17319 | HIGH8.8 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Emails module by a Regular user. | 07/10/2019 |
| CVE-2019-17318 | HIGH8.8 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmse_Inbox module by a Regular user. | 07/10/2019 |
| CVE-2019-17317 | HIGH7.2 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP object injection in the UpgradeWizard module by an Admin user. | 07/10/2019 |