VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

403,593 vulnerabilities · 1,767 actively exploited (CISA KEV)

zurmo crm ✕Clear filters

6 results

ID	Severity	Summary	Published
CVE-2018-16654	MEDIUM6.1	Zurmo 3.2.4 Stable allows XSS via app/index.php/accounts/default/details?id=2&kanbanBoard=1&openToTaskId=1.	07/09/2018
CVE-2017-18004	MEDIUM5.4	Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint.	31/12/2017
CVE-2017-16569	MEDIUM4.8	An Open URL Redirect issue exists in Zurmo 3.2.1.57987acc3018 via an http: URL in the redirectUrl parameter to app/index.php/meetings/default/createMeeting.	06/11/2017
CVE-2017-15039	MEDIUM4.8	Cross-site scripting (XSS) exists in Zurmo 3.2.1.57987acc3018 via a data: URL in the redirectUrl parameter to app/index.php/meetings/default/createMeeting.