Vulnerabilidades em SuiteCRM
68 resultadosAnálise Vexday
SuiteCRM apresenta 33 vulnerabilidades catalogadas, predominantemente injeção SQL (CWE-89), sem registros de exploração ativa em campo. Embora 2 sejam classificadas como críticas, a ausência de atividade recente (nenhuma publicação nos últimos 90 dias e zero CVEs em exploração) sugere risco controlado para ambientes com patch management atualizado.
CVE-2026-61650HIGHSuiteCRM: Incorrect Access Control in V8 relationship creation via missing edit authorizationEPSS 0.2%CVE-2026-69136HIGHSuiteCRM: Authenticated SQL Injection In handleAttachments functionEPSS 0.2%CVE-2026-29105MEDIUMSuiteCRM has Unauthenticated Open Redirect in Leads WebToLead CaptureEPSS 0.2%CVE-2025-64491MEDIUMSuiteCRM is vulnerable to unauthenticated reflected XSS through its Login pageEPSS 0.2%CVE-2025-41384MEDIUMReflected Cross-Site Scripting (XSS) in SuiteCRMEPSS 0.2%CVE-2026-29107MEDIUMSuiteCRM vulnerable to authenticated SSRF via PDF exportEPSS 0.2%CVE-2026-29100HIGHSuiteCRM has Reflected HTML Injection in Login Page via default_user_name ParameterEPSS 0.2%CVE-2026-29106MEDIUMSuiteCRM has blind XSS in return_id parameterEPSS 0.2%