VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

403,758 vulnerabilities · 1,768 actively exploited (CISA KEV)

zurmo crm ✕Clear filters

6 results

ID	Severity	Summary	Published
CVE-2018-16654	보통6.1	Zurmo 3.2.4 Stable allows XSS via app/index.php/accounts/default/details?id=2&kanbanBoard=1&openToTaskId=1.	07/09/2018
CVE-2017-18004	보통5.4	Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint.	31/12/2017
CVE-2017-16569	보통4.8	An Open URL Redirect issue exists in Zurmo 3.2.1.57987acc3018 via an http: URL in the redirectUrl parameter to app/index.php/meetings/default/createMeeting.	06/11/2017
CVE-2017-15039	보통4.8	Cross-site scripting (XSS) exists in Zurmo 3.2.1.57987acc3018 via a data: URL in the redirectUrl parameter to app/index.php/meetings/default/createMeeting.