Browse CVEs

MEDIUM 5.3 CVE-2019-16922 SuiteCRM 7.10.x before 7.10.20 and 7.11.x before 7.11.8 allows unintended public exposure of files. Suitecrm 7.10.20 / 7.11.8+ Fix from $1,6002019-09-27 CRITICAL 9.8 CVE-2019-12598 SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 1 of 3). Suitecrm 7.8.30 / 7.10.17+ Fix from $2,3002019-06-07 CRITICAL 9.8 CVE-2019-12599 SuiteCRM 7.10.x before 7.10.17 and 7.11.x before 7.11.5 allows SQL Injection. Suitecrm 7.10.17 / 7.11.5+ Fix from $2,3002019-06-07 CRITICAL 9.8 CVE-2019-12600 SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 2 of 3). Suitecrm 7.8.30 / 7.10.17+ Fix from $2,3002019-06-07 CRITICAL 9.8 CVE-2019-12601 SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 3 of 3). Suitecrm 7.8.30 / 7.10.17+ Fix from $2,3002019-06-07 MEDIUM 6.1 CVE-2018-20816 An XSS combined with CSRF vulnerability discovered in SalesAgility SuiteCRM 7.x before 7.8.24 and 7.10.x before 7.10.11 leads to cookie stealing, aka… Suitecrm 7.8.24 / 7.10.11+ Fix from $1,6002019-04-05 CRITICAL 9.8 CVE-2019-6506 SuiteCRM before 7.8.28, 7.9.x and 7.10.x before 7.10.15, and 7.11.x before 7.11.3 allows SQL Injection. Suitecrm Mitigation only Fix from $2,3002019-04-02 MEDIUM 6.1 CVE-2018-15606 An XSS issue was discovered in SalesAgility SuiteCRM 7.x before 7.8.21 and 7.10.x before 7.10.8, related to phishing an error message. Suitecrm 7.8.21 / 7.10.8+ Fix from $1,6002018-09-26 HIGH 8.1 CVE-2015-5947 SuiteCRM before 7.2.3 allows remote attackers to execute arbitrary code. Suitecrm after 7.2.2 Fix from $1,9502017-09-06 HIGH 8.1 CVE-2015-5948 Race condition in SuiteCRM before 7.2.3 allows remote attackers to execute arbitrary code. NOTE: this vulnerability exists because of an incomplete … Suitecrm after 7.2.2 Fix from $1,9502017-09-06