sugarcrm kayıtları

sugarcrm üreticisine ait 68 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 1 · %1,5
Silahlaştırılmış: 2 · %2,9
Pre-auth RCE: 8
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: 22 gün

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

68 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
89Hemen	CVE-2023-22952Silahlaştırılmış	In SugarCRM before 12.0.sugarcrm · sugarcrm · CWE-20	Yüksek8,8	KEV	%80,1	11 Oca 2023
59Planlayın	CVE-2012-0694Silahlaştırılmış	SugarCRM CE <= 6.3.1 contains scripts that use "unserialize()" with user controlled input which allows remote attackers to execute arbitrarysugarcrm · sugarcrm · CWE-20 pre-auth RCE	Kritik9,8	—	%67,3	29 Eki 2019
41Planlayın	CVE-2014-3244İstismar yok	XML external entity (XXE) vulnerability in the RSSDashlet dashlet in SugarCRM before 6.5.17 allows remote attackers to read arbitrary files sugarcrm · sugarcrm · CWE-611 pre-auth RCE XXE	Kritik9,8	—	%5,0	1 Şub 2018
41Planlayın	CVE-2004-1227Kavram kanıtı	Directory traversal vulnerability in SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to read arbitrary files and possibly exsugarcrm · sugar sales pre-auth RCE Yol geçişi	Kritik10,0	—	%4,2	10 Oca 2005
41Planlayın	CVE-2004-1225Kavram kanıtı	SQL injection vulnerability in SugarCRM Sugar Sales before 2.0.1a allows remote attackers to execute arbitrary SQL commands and gain privilesugarcrm · sugarcrm pre-auth RCE SQL enjeksiyonu	Kritik10,0	—	%1,8	10 Oca 2005
40Planlayın	CVE-2020-7472İstismar yok	An authorization bypass and PHP local-file-include vulnerability in the installation component of SugarCRM before 8.0, 8.0 before 8.0.7, 9.0sugarcrm · sugarcrm · CWE-20 pre-auth RCE	Kritik9,8	—	%3,2	12 Kas 2020
39İzleyin	CVE-2018-6308İstismar yok	Multiple SQL injections exist in SugarCRM Community Edition 6.5.26 and below via the track parameter to modules\Campaigns\Tracker.php and mosugarcrm · sugarcrm · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%1,1	25 Oca 2018
37İzleyin	CVE-2017-14509İstismar yok	An issue was discovered in SugarCRM before 7.7.2.3, 7.8.x before 7.8.2.2, and 7.9.x before 7.9.2.0 (and Sugar Community Edition 6.5.26).sugarcrm · sugarcrm · CWE-20	Yüksek8,8	—	%5,8	17 Eyl 2017
36İzleyin	CVE-2017-14508İstismar yok	An issue was discovered in SugarCRM before 7.7.2.3, 7.8.x before 7.8.2.2, and 7.9.x before 7.9.2.0 (and Sugar Community Edition 6.5.26).sugarcrm · sugarcrm · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%2,6	17 Eyl 2017
36İzleyin	CVE-2019-17311İstismar yok	SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the attachment function by a Regular user.sugarcrm · sugarcrm · CWE-22 Yol geçişi	Yüksek8,8	—	%2,0	7 Eki 2019
36İzleyin	CVE-2019-17312İstismar yok	SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the file function by a Regular user.sugarcrm · sugarcrm · CWE-22 Yol geçişi	Yüksek8,8	—	%2,0	7 Eki 2019
36İzleyin	CVE-2019-17313İstismar yok	SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the Studio module by a Developer user.sugarcrm · sugarcrm · CWE-22 Yol geçişi	Yüksek8,8	—	%2,0	7 Eki 2019
35İzleyin	CVE-2019-17316İstismar yok	SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP object injection in the Import module by a Regular user.sugarcrm · sugarcrm · CWE-1321 Prototype pollution	Yüksek8,8	—	%1,5	7 Eki 2019
35İzleyin	CVE-2019-17303İstismar yok	SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by a Developer user.sugarcrm · sugarcrm · CWE-94 RCE	Yüksek8,8	—	%1,4	7 Eki 2019
35İzleyin	CVE-2019-17308İstismar yok	SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Emails module by a Regular user.sugarcrm · sugarcrm · CWE-94 RCE	Yüksek8,8	—	%1,4	7 Eki 2019
35İzleyin	CVE-2019-17305İstismar yok	SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by a Regular user.sugarcrm · sugarcrm · CWE-94 RCE	Yüksek8,8	—	%1,4	7 Eki 2019
35İzleyin	CVE-2019-17300İstismar yok	SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Administration module by a Developer user.sugarcrm · sugarcrm · CWE-94 RCE	Yüksek8,8	—	%1,4	7 Eki 2019
35İzleyin	CVE-2019-17302İstismar yok	SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the ModuleBuilder module by a Developer user.sugarcrm · sugarcrm · CWE-94 RCE	Yüksek8,8	—	%1,4	7 Eki 2019
35İzleyin	CVE-2023-35809İstismar yok	An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3.sugarcrm · sugarcrm · CWE-94 RCE	Yüksek8,8	—	%1,3	17 Haz 2023
35İzleyin	CVE-2023-35808İstismar yok	An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3.sugarcrm · sugarcrm · CWE-434 Dosya yükleme	Yüksek8,8	—	%1,3	17 Haz 2023
35İzleyin	CVE-2019-17319İstismar yok	SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Emails module by a Regular user.sugarcrm · sugarcrm · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%1,2	7 Eki 2019
35İzleyin	CVE-2019-17318İstismar yok	SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmse_Inbox module by a Regular user.sugarcrm · sugarcrm · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%1,2	7 Eki 2019
35İzleyin	CVE-2019-17295İstismar yok	SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the history function by a Regular user.sugarcrm · sugarcrm · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%1,2	7 Eki 2019
35İzleyin	CVE-2019-17298İstismar yok	SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Administration module by a Developer user.sugarcrm · sugarcrm · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%1,2	7 Eki 2019
35İzleyin	CVE-2019-17293İstismar yok	SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmse_Project module by a Regular user.sugarcrm · sugarcrm · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%1,2	7 Eki 2019

CVE-2023-22952
89Hemen
In SugarCRM before 12.0.
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %80
sugarcrm · sugarcrm11 Oca 2023
CVE-2012-0694
59Planlayın
SugarCRM CE <= 6.3.1 contains scripts that use "unserialize()" with user controlled input which allows remote attackers to execute arbitrary
KritikCVSS 9,8SilahlaştırılmışEPSS %67
- pre-auth RCE
sugarcrm · sugarcrm29 Eki 2019
CVE-2014-3244
41Planlayın
XML external entity (XXE) vulnerability in the RSSDashlet dashlet in SugarCRM before 6.5.17 allows remote attackers to read arbitrary files
KritikCVSS 9,8İstismar yokEPSS %5
- pre-auth RCE
- XXE
sugarcrm · sugarcrm1 Şub 2018
CVE-2004-1227
41Planlayın
Directory traversal vulnerability in SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to read arbitrary files and possibly ex
KritikCVSS 10,0Kavram kanıtıEPSS %4
- pre-auth RCE
- Yol geçişi
sugarcrm · sugar sales10 Oca 2005
CVE-2004-1225
41Planlayın
SQL injection vulnerability in SugarCRM Sugar Sales before 2.0.1a allows remote attackers to execute arbitrary SQL commands and gain privile
KritikCVSS 10,0Kavram kanıtıEPSS %2
- pre-auth RCE
- SQL enjeksiyonu
sugarcrm · sugarcrm10 Oca 2005
CVE-2020-7472
40Planlayın
An authorization bypass and PHP local-file-include vulnerability in the installation component of SugarCRM before 8.0, 8.0 before 8.0.7, 9.0
KritikCVSS 9,8İstismar yokEPSS %3
- pre-auth RCE
sugarcrm · sugarcrm12 Kas 2020
CVE-2018-6308
39İzleyin
Multiple SQL injections exist in SugarCRM Community Edition 6.5.26 and below via the track parameter to modules\Campaigns\Tracker.php and mo
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- SQL enjeksiyonu
sugarcrm · sugarcrm25 Oca 2018
CVE-2017-14509
37İzleyin
An issue was discovered in SugarCRM before 7.7.2.3, 7.8.x before 7.8.2.2, and 7.9.x before 7.9.2.0 (and Sugar Community Edition 6.5.26).
YüksekCVSS 8,8İstismar yokEPSS %6
sugarcrm · sugarcrm17 Eyl 2017
CVE-2017-14508
36İzleyin
An issue was discovered in SugarCRM before 7.7.2.3, 7.8.x before 7.8.2.2, and 7.9.x before 7.9.2.0 (and Sugar Community Edition 6.5.26).
YüksekCVSS 8,8İstismar yokEPSS %3
- SQL enjeksiyonu
sugarcrm · sugarcrm17 Eyl 2017
CVE-2019-17311
36İzleyin
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the attachment function by a Regular user.
YüksekCVSS 8,8İstismar yokEPSS %2
- Yol geçişi
sugarcrm · sugarcrm7 Eki 2019
CVE-2019-17312
36İzleyin
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the file function by a Regular user.
YüksekCVSS 8,8İstismar yokEPSS %2
- Yol geçişi
sugarcrm · sugarcrm7 Eki 2019
CVE-2019-17313
36İzleyin
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the Studio module by a Developer user.
YüksekCVSS 8,8İstismar yokEPSS %2
- Yol geçişi
sugarcrm · sugarcrm7 Eki 2019
CVE-2019-17316
35İzleyin
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP object injection in the Import module by a Regular user.
YüksekCVSS 8,8İstismar yokEPSS %1
- Prototype pollution
sugarcrm · sugarcrm7 Eki 2019
CVE-2019-17303
35İzleyin
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by a Developer user.
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
sugarcrm · sugarcrm7 Eki 2019
CVE-2019-17308
35İzleyin
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Emails module by a Regular user.
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
sugarcrm · sugarcrm7 Eki 2019
CVE-2019-17305
35İzleyin
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by a Regular user.
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
sugarcrm · sugarcrm7 Eki 2019
CVE-2019-17300
35İzleyin
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Administration module by a Developer user.
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
sugarcrm · sugarcrm7 Eki 2019
CVE-2019-17302
35İzleyin
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the ModuleBuilder module by a Developer user.
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
sugarcrm · sugarcrm7 Eki 2019
CVE-2023-35809
35İzleyin
An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3.
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
sugarcrm · sugarcrm17 Haz 2023
CVE-2023-35808
35İzleyin
An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3.
YüksekCVSS 8,8İstismar yokEPSS %1
- Dosya yükleme
sugarcrm · sugarcrm17 Haz 2023
CVE-2019-17319
35İzleyin
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Emails module by a Regular user.
YüksekCVSS 8,8İstismar yokEPSS %1
- SQL enjeksiyonu
sugarcrm · sugarcrm7 Eki 2019
CVE-2019-17318
35İzleyin
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmse_Inbox module by a Regular user.
YüksekCVSS 8,8İstismar yokEPSS %1
- SQL enjeksiyonu
sugarcrm · sugarcrm7 Eki 2019
CVE-2019-17295
35İzleyin
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the history function by a Regular user.
YüksekCVSS 8,8İstismar yokEPSS %1
- SQL enjeksiyonu
sugarcrm · sugarcrm7 Eki 2019
CVE-2019-17298
35İzleyin
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Administration module by a Developer user.
YüksekCVSS 8,8İstismar yokEPSS %1
- SQL enjeksiyonu
sugarcrm · sugarcrm7 Eki 2019
CVE-2019-17293
35İzleyin
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmse_Project module by a Regular user.
YüksekCVSS 8,8İstismar yokEPSS %1
- SQL enjeksiyonu
sugarcrm · sugarcrm7 Eki 2019