Export limit exceeded: 51979 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2017-15039

Cross-site scripting (XSS) exists in Zurmo 3.2.1.57987acc3018 via a data: URL in the redirectUrl parameter to app/index.php/meetings/default/createMeeting.

CVSS 3.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Zurmo
Products
Zurmo Crm
CVE-2017-16569

An Open URL Redirect issue exists in Zurmo 3.2.1.57987acc3018 via an http: URL in the redirectUrl parameter to app/index.php/meetings/default/createMeeting.

CVSS 3.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Zurmo
Products
Zurmo Crm
CVE-2017-18004

Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint.

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Zurmo
Products
Zurmo Crm
CVE-2017-7188

Zurmo 3.1.1 Stable allows a Cross-Site Scripting (XSS) attack with a base64-encoded SCRIPT element within a data: URL in the returnUrl parameter to default/toggleCollapse.

CVSS 3.1 · 5.4 Medium EPSS 1.4% KEV · Not listed
Vendors
Zurmo
Products
Zurmo Crm
CVE-2015-5365

Cross-site scripting (XSS) vulnerability in Zurmo CRM 3.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "What's going on?" profile field.

CVSS 2.0 · 3.5 Low EPSS 1.1% KEV · Not listed
Vendors
Zurmo
Products
Zurmo Crm
CVE-2018-16654

Zurmo 3.2.4 Stable allows XSS via app/index.php/accounts/default/details?id=2&kanbanBoard=1&openToTaskId=1.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Zurmo
Products
Zurmo Crm