Vulnerabilidades em Suitecrm
68 resultadosAnálise Vexday
SuiteCRM apresenta footprint de risco reduzido com apenas 2 CVEs catalogadas, nenhuma sob exploração ativa ou com severidade crítica. A vulnerabilidade dominante é injeção SQL (CWE-89), sem registros de descobertas recentes nos últimos 90 dias, indicando que o risco atual é circunscrito e não representa ameaça imediata.
CVE-2026-61650HIGHSuiteCRM: Incorrect Access Control in V8 relationship creation via missing edit authorizationEPSS 0.2%CVE-2026-69136HIGHSuiteCRM: Authenticated SQL Injection In handleAttachments functionEPSS 0.2%CVE-2026-29105MEDIUMSuiteCRM has Unauthenticated Open Redirect in Leads WebToLead CaptureEPSS 0.2%CVE-2025-64491MEDIUMSuiteCRM is vulnerable to unauthenticated reflected XSS through its Login pageEPSS 0.2%CVE-2025-41384MEDIUMReflected Cross-Site Scripting (XSS) in SuiteCRMEPSS 0.2%CVE-2026-29107MEDIUMSuiteCRM vulnerable to authenticated SSRF via PDF exportEPSS 0.2%CVE-2026-29100HIGHSuiteCRM has Reflected HTML Injection in Login Page via default_user_name ParameterEPSS 0.2%CVE-2026-29106MEDIUMSuiteCRM has blind XSS in return_id parameterEPSS 0.2%