Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 65

Export CSV
CVE-2019-17310

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Campaigns module by an Admin user.

CVSS 3.1 · 7.2 High EPSS 1.4% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17309

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the EmailMan module by an Admin user.

CVSS 3.1 · 7.2 High EPSS 1.4% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17308

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Emails module by a Regular user.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17307

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Tracker module by an Admin user.

CVSS 3.1 · 7.2 High EPSS 1.4% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17306

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Configurator module by an Admin user.

CVSS 3.1 · 7.2 High EPSS 1.4% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17305

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by a Regular user.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17304

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by an Admin user.

CVSS 3.1 · 7.2 High EPSS 1.4% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17303

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by a Developer user.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17302

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the ModuleBuilder module by a Developer user.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17301

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the ModuleBuilder module by an Admin user.

CVSS 3.1 · 7.2 High EPSS 1.4% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17300

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Administration module by a Developer user.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17299

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Administration module by an Admin user.

CVSS 3.1 · 7.2 High EPSS 1.4% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17298

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Administration module by a Developer user.

CVSS 3.1 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17297

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Quotes module by a Regular user.

CVSS 3.1 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17296

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Contacts module by a Regular user.

CVSS 3.1 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17295

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the history function by a Regular user.

CVSS 3.1 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17294

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the export function by a Regular user.

CVSS 3.1 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17293

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmse_Project module by a Regular user.

CVSS 3.1 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17292

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmse_Inbox module by an Admin user.

CVSS 3.1 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-14974

SugarCRM Enterprise 9.0.0 allows mobile/error-not-supported-platform.html?desktop_url= XSS.

CVSS 3.0 · 6.1 Medium EPSS 28.4% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm