CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 16/03/2020 |
| CVE-2020-8784 | CRITICAL9.8 | SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL Injection (issue 2 of 4). | 16/03/2020 |
| CVE-2020-8783 | CRITICAL9.8 | SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL Injection (issue 1 of 4). | 16/03/2020 |
| CVE-2020-8804 | MEDIUM6.5 | SuiteCRM through 7.11.10 allows SQL Injection via the SOAP API, the EmailUIAjax interface, or the MailMerge module. | 13/02/2020 |
| CVE-2020-8803 | CRITICAL9.8 | SuiteCRM through 7.11.11 allows Directory Traversal to include arbitrary .php files within the webroot via add_to_prospect_list. | 13/02/2020 |
| CVE-2020-8802 | CRITICAL9.8 | SuiteCRM through 7.11.11 has Incorrect Access Control via action_saveHTMLField Bean Manipulation. | 13/02/2020 |
| CVE-2020-8801 | HIGH7.2 | SuiteCRM through 7.11.11 allows PHAR Deserialization. | 13/02/2020 |
| CVE-2020-8800 | HIGH8.8 | SuiteCRM through 7.11.11 allows EmailsControllerActionGetFromFields PHP Object Injection. | 13/02/2020 |
| CVE-2019-18784 | CRITICAL9.8 | SuiteCRM 7.10.x versions prior to 7.10.21 and 7.11.x versions prior to 7.11.9 allow SQL Injection. | 06/11/2019 |
| CVE-2019-14454 | CRITICAL9.8 | SuiteCRM 7.11.x and 7.10.x before 7.11.8 and 7.10.20 is vulnerable to vertical privilege escalation. | 02/10/2019 |
| CVE-2019-13335 | CRITICAL9.8 | SalesAgility SuiteCRM 7.10.x 7.10.19 and 7.11.x before and 7.11.7 has SSRF. | 02/10/2019 |
| CVE-2019-14752 | MEDIUM6.1 | SuiteCRM 7.10.x and 7.11.x before 7.10.20 and 7.11.8 has XSS. | 30/09/2019 |
| CVE-2019-16922 | MEDIUM5.3 | SuiteCRM 7.10.x before 7.10.20 and 7.11.x before 7.11.8 allows unintended public exposure of files. | 27/09/2019 |
| CVE-2019-12601 | CRITICAL9.8 | SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 3 of 3). | 07/06/2019 |
| CVE-2019-12600 | CRITICAL9.8 | SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 2 of 3). | 07/06/2019 |
| CVE-2019-12599 | CRITICAL9.8 | SuiteCRM 7.10.x before 7.10.17 and 7.11.x before 7.11.5 allows SQL Injection. | 07/06/2019 |
| CVE-2019-12598 | CRITICAL9.8 | SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 1 of 3). | 07/06/2019 |