Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

CRM

EspoCRM

EspoCRM is a web application that allows you to see enter and evaluate all your company relationships regardless of the type. People companies projects or opportunities all in an easy and intuitive interface.

Official Site:

https://www.espocrm.com/

Severity Summary:

Critical: 3 High: 7 Medium: 27 Low: 2
Reference
Title
Severity
CVE-2019-14331
EspoCRM Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2014-7986
EspoCRM Permissions Privileges and Access Controls Vulnerability
Medium
CVE-2014-7987
EspoCRM Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2018-17301
EspoCRM Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2018-17302
EspoCRM Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2019-13643
EspoCRM Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2019-14550
EspoCRM Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2025-32789
EspoCRM Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Low
CVE-2026-33659
EspoCRM Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability
Low