Salesagility Suitecrm
105 CVEs affecting Salesagility Suitecrm. Latest disclosed: 2026-04-05. Critical: 26, High: 39.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-36412 | Critical | 10.0 | 2024-06-10 | SuiteCRM is an open-source Customer Relationship Management (CRM) software application. Prior to versions 7.14.4 and 8.6.1, a vulnerability in events response… |
CVE-2024-1644 | Critical | 9.9 | 2024-02-20 | Suite CRM version 7.14.2 allows including local php files. This is possible because the application is vulnerable to LFI. |
CVE-2022-50589 | Critical | 9.8 | 2025-11-06 | SuiteCRM versions prior to 7.12.6 contain a SQL injection vulnerability within the processing of the ‘uid’ parameter within the ‘export’ functionality. Success… |
CVE-2023-6126 | Critical | 9.8 | 2023-11-14 | Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2. |
CVE-2021-45899 | Critical | 9.8 | 2022-01-28 | SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows PHAR deserialization that can lead to remote code execution. |
CVE-2021-45898 | Critical | 9.8 | 2022-01-28 | SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows local file inclusion. |
CVE-2020-8786 | Critical | 9.8 | 2020-03-16 | SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL Injection (issue 4 of 4). |
CVE-2020-8785 | Critical | 9.8 | 2020-03-16 | SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL Injection (issue 3 of 4). |
CVE-2020-8784 | Critical | 9.8 | 2020-03-16 | SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL Injection (issue 2 of 4). |
CVE-2020-8783 | Critical | 9.8 | 2020-03-16 | SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL Injection (issue 1 of 4). |
CVE-2020-8803 | Critical | 9.8 | 2020-02-13 | SuiteCRM through 7.11.11 allows Directory Traversal to include arbitrary .php files within the webroot via add_to_prospect_list. |
CVE-2020-8802 | Critical | 9.8 | 2020-02-13 | SuiteCRM through 7.11.11 has Incorrect Access Control via action_saveHTMLField Bean Manipulation. |
CVE-2019-18784 | Critical | 9.8 | 2019-11-06 | SuiteCRM 7.10.x versions prior to 7.10.21 and 7.11.x versions prior to 7.11.9 allow SQL Injection. |
CVE-2019-14454 | Critical | 9.8 | 2019-10-02 | SuiteCRM 7.11.x and 7.10.x before 7.11.8 and 7.10.20 is vulnerable to vertical privilege escalation. |
CVE-2019-13335 | Critical | 9.8 | 2019-10-02 | SalesAgility SuiteCRM 7.10.x 7.10.19 and 7.11.x before and 7.11.7 has SSRF. |
CVE-2019-12601 | Critical | 9.8 | 2019-06-07 | SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 3 of 3). |
CVE-2019-12600 | Critical | 9.8 | 2019-06-07 | SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 2 of 3). |
CVE-2019-12599 | Critical | 9.8 | 2019-06-07 | SuiteCRM 7.10.x before 7.10.17 and 7.11.x before 7.11.5 allows SQL Injection. |
CVE-2019-12598 | Critical | 9.8 | 2019-06-07 | SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 1 of 3). |
CVE-2019-6506 | Critical | 9.8 | 2019-04-02 | SuiteCRM before 7.8.28, 7.9.x and 7.10.x before 7.10.15, and 7.11.x before 7.11.3 allows SQL Injection. |