Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 70

Export CSV
CVE-2019-17315

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP object injection in the Administration module by an Admin user.

CVSS 3.1 · 7.2 High EPSS 1.4% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17314

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the Configurator module by an Admin user.

CVSS 3.1 · 7.2 High EPSS 1.9% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17313

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the Studio module by a Developer user.

CVSS 3.1 · 8.8 High EPSS 2.0% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17312

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the file function by a Regular user.

CVSS 3.1 · 8.8 High EPSS 2.0% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17311

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the attachment function by a Regular user.

CVSS 3.1 · 8.8 High EPSS 2.0% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17310

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Campaigns module by an Admin user.

CVSS 3.1 · 7.2 High EPSS 1.4% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17309

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the EmailMan module by an Admin user.

CVSS 3.1 · 7.2 High EPSS 1.4% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17308

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Emails module by a Regular user.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17307

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Tracker module by an Admin user.

CVSS 3.1 · 7.2 High EPSS 1.4% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17306

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Configurator module by an Admin user.

CVSS 3.1 · 7.2 High EPSS 1.4% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17305

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by a Regular user.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17304

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by an Admin user.

CVSS 3.1 · 7.2 High EPSS 1.4% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17303

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by a Developer user.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17302

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the ModuleBuilder module by a Developer user.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17301

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the ModuleBuilder module by an Admin user.

CVSS 3.1 · 7.2 High EPSS 1.4% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17300

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Administration module by a Developer user.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17299

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Administration module by an Admin user.

CVSS 3.1 · 7.2 High EPSS 1.4% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17298

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Administration module by a Developer user.

CVSS 3.1 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17297

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Quotes module by a Regular user.

CVSS 3.1 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm
CVE-2019-17296

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Contacts module by a Regular user.

CVSS 3.1 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Sugarcrm
Products
Sugarcrm