İçeriğe atla
Noroxi

salesagility kayıtları

salesagility üreticisine ait 105 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
3 · %2,9
Pre-auth RCE
6
Düzeltme kaydı olan
%10,5
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

105 kayıt
  • CVE-2023-5350
    60Bu hafta

    SQL Injection in salesagility/suitecrm

    KritikCVSS 9,1SilahlaştırılmışEPSS %2

    salesagility · suitecrm3 Eki 2023

  • CVE-2020-28328
    54Planlayın

    SuiteCRM before 7.11.17 is vulnerable to remote code execution via the system settings Log File Name setting.

    YüksekCVSS 8,8SilahlaştırılmışEPSS %63

    salesagility · suitecrm6 Kas 2020

  • CVE-2021-42840
    53Planlayın

    SuiteCRM before 7.11.19 allows remote code execution via the system settings Log File Name setting.

    YüksekCVSS 8,8SilahlaştırılmışEPSS %58

    salesagility · suitecrm22 Eki 2021

  • CVE-2022-23940
    51Planlayın

    SuiteCRM through 7.12.1 and 8.x through 8.0.1 allows Remote Code Execution.

    YüksekCVSS 8,8Kavram kanıtıEPSS %53

    salesagility · suitecrm10 Mar 2022

  • CVE-2023-1034
    43Planlayın

    Path Traversal: '\..\filename' in salesagility/suitecrm

    YüksekCVSS 8,8İstismar yokEPSS %26

    salesagility · suitecrm24 Şub 2023

  • CVE-2024-36412
    41Planlayın

    SuiteCRM unauthenticated SQL Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %5

    salesagility · suitecrm10 Haz 2024

  • CVE-2020-8803
    40Planlayın

    SuiteCRM through 7.11.11 allows Directory Traversal to include arbitrary .php files within the webroot via add_to_prospect_list.

    KritikCVSS 9,8İstismar yokEPSS %3

    salesagility · suitecrm13 Şub 2020

  • CVE-2020-8802
    40Planlayın

    SuiteCRM through 7.11.11 has Incorrect Access Control via action_saveHTMLField Bean Manipulation.

    KritikCVSS 9,8İstismar yokEPSS %2

    salesagility · suitecrm13 Şub 2020

  • CVE-2021-45899
    40Planlayın

    SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows PHAR deserialization that can lead to remote code execution.

    KritikCVSS 9,8İstismar yokEPSS %2

    salesagility · suitecrm28 Oca 2022

  • CVE-2019-6506
    40Planlayın

    SuiteCRM before 7.8.28, 7.9.x and 7.10.x before 7.10.15, and 7.11.x before 7.11.3 allows SQL Injection.

    KritikCVSS 9,8İstismar yokEPSS %1

    salesagility · suitecrm2 Nis 2019

  • CVE-2019-14454
    39İzleyin

    SuiteCRM 7.11.x and 7.10.x before 7.11.8 and 7.10.20 is vulnerable to vertical privilege escalation.

    KritikCVSS 9,8İstismar yokEPSS %1

    salesagility · suitecrm2 Eki 2019

  • CVE-2019-13335
    39İzleyin

    SalesAgility SuiteCRM 7.10.x 7.10.19 and 7.11.x before and 7.11.7 has SSRF.

    KritikCVSS 9,8İstismar yokEPSS %1

    salesagility · suitecrm2 Eki 2019

  • CVE-2020-8784
    39İzleyin

    SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL Injection (issue 2 of 4).

    KritikCVSS 9,8İstismar yokEPSS %1

    salesagility · suitecrm16 Mar 2020

  • CVE-2021-45898
    39İzleyin

    SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows local file inclusion.

    KritikCVSS 9,8İstismar yokEPSS %1

    salesagility · suitecrm28 Oca 2022

  • CVE-2019-12600
    39İzleyin

    SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 2 of 3).

    KritikCVSS 9,8İstismar yokEPSS %1

    salesagility · suitecrm7 Haz 2019

  • CVE-2019-12599
    39İzleyin

    SuiteCRM 7.10.x before 7.10.17 and 7.11.x before 7.11.5 allows SQL Injection.

    KritikCVSS 9,8İstismar yokEPSS %1

    salesagility · suitecrm7 Haz 2019

  • CVE-2019-12598
    39İzleyin

    SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 1 of 3).

    KritikCVSS 9,8İstismar yokEPSS %1

    salesagility · suitecrm7 Haz 2019

  • CVE-2019-12601
    39İzleyin

    SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 3 of 3).

    KritikCVSS 9,8İstismar yokEPSS %1

    salesagility · suitecrm7 Haz 2019

  • CVE-2019-18784
    39İzleyin

    SuiteCRM 7.10.x versions prior to 7.10.21 and 7.11.x versions prior to 7.11.9 allow SQL Injection.

    KritikCVSS 9,8İstismar yokEPSS %1

    salesagility · suitecrm5 Kas 2019

  • CVE-2020-8785
    39İzleyin

    SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL Injection (issue 3 of 4).

    KritikCVSS 9,8İstismar yokEPSS %1

    salesagility · suitecrm16 Mar 2020

  • CVE-2020-8786
    39İzleyin

    SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL Injection (issue 4 of 4).

    KritikCVSS 9,8İstismar yokEPSS %1

    salesagility · suitecrm16 Mar 2020

  • CVE-2020-8783
    39İzleyin

    SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL Injection (issue 1 of 4).

    KritikCVSS 9,8İstismar yokEPSS %1

    salesagility · suitecrm16 Mar 2020

  • CVE-2023-6126
    39İzleyin

    Code Injection in salesagility/suitecrm

    KritikCVSS 9,8İstismar yokEPSS %0

    salesagility · suitecrm14 Kas 2023

  • CVE-2022-50589
    37İzleyin

    SuiteCRM < 7.12.6 SQL Injection via 'export' Functionality

    KritikCVSS 9,3İstismar yokEPSS %0

    salesagility · suitecrm6 Kas 2025

  • CVE-2021-45897
    36İzleyin

    SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows remote code execution.

    YüksekCVSS 8,8Kavram kanıtıEPSS %4

    salesagility · suitecrm28 Oca 2022