Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

CRM

SugarCRM

SugarCRM empowers your marketing sales and services teams to collaborate across the entire customer lifecycle for more meaningful memorable experiences.

Official Site:

https://www.sugarcrm.com/

Severity Summary:

Critical: 5 High: 40 Medium: 18
Reference
Title
Severity
CVE-2018-6308
SugarCRM Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Critical
CVE-2020-7472
SugarCRM Missing Authorization Vulnerability
Critical
CVE-2012-0694
SugarCRM Improper Input Validation Vulnerability
Critical
CVE-2014-3244
SugarCRM Improper Restriction of XML External Entity Reference Vulnerability
Critical
CVE-2004-1225
SugarCRM Other Vulnerability
Critical
CVE-2019-17314
SugarCRM Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
High
CVE-2019-17313
SugarCRM Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
High
CVE-2019-17312
SugarCRM Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
High
CVE-2019-17311
SugarCRM Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
High
CVE-2019-17310
SugarCRM Improper Control of Generation of Code (Code Injection) Vulnerability
High
CVE-2019-17309
SugarCRM Improper Control of Generation of Code (Code Injection) Vulnerability
High
CVE-2019-17308
SugarCRM Improper Control of Generation of Code (Code Injection) Vulnerability
High
CVE-2019-17307
SugarCRM Improper Control of Generation of Code (Code Injection) Vulnerability
High
CVE-2019-17306
SugarCRM Improper Control of Generation of Code (Code Injection) Vulnerability
High
CVE-2019-17305
SugarCRM Improper Control of Generation of Code (Code Injection) Vulnerability
High
CVE-2019-17304
SugarCRM Improper Control of Generation of Code (Code Injection) Vulnerability
High
CVE-2019-17303
SugarCRM Improper Control of Generation of Code (Code Injection) Vulnerability
High
CVE-2019-17302
SugarCRM Improper Control of Generation of Code (Code Injection) Vulnerability
High
CVE-2019-17301
SugarCRM Improper Control of Generation of Code (Code Injection) Vulnerability
High
CVE-2019-17300
SugarCRM Improper Control of Generation of Code (Code Injection) Vulnerability
High
CVE-2019-17299
SugarCRM Improper Control of Generation of Code (Code Injection) Vulnerability
High
CVE-2019-17298
SugarCRM Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High
CVE-2019-17297
SugarCRM Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High
CVE-2019-17296
SugarCRM Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High
CVE-2019-17295
SugarCRM Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High
CVE-2019-17294
SugarCRM Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High
CVE-2019-17293
SugarCRM Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High
CVE-2019-17292
SugarCRM Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High
CVE-2019-17319
SugarCRM Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High
CVE-2019-17318
SugarCRM Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High