VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

402.386 vulnerabilities · 1766 actively exploited (CISA KEV)

salesagility ✕Clear filters

105 results

ID	Severity	Summary	Published
CVE-2024-1644	ALTO8.8	Suite CRM version 7.14.2 allows including local php files. This is possible because the application is vulnerable to LFI.	20/02/2024
CVE-2023-6388	MEDIO5.0	Suite CRM version 7.14.2 allows making arbitrary HTTP requests through the vulnerable server. This is possible because the application is vulnerable to SSRF.	07/02/2024
CVE-2023-47643	MEDIO5.3	SuiteCRM is a Customer Relationship Management (CRM) software application. Prior to version 8.4.2, Graphql Introspection is enabled without authentication, exposing the scheme defining all object types, arguments, and functions. An attacker can obtain the GraphQL schema and understand the entire attack surface of the A	21/11/2023