[ Vendor · 2 CVEs ]
SugarCRM
CVEs affecting SugarCRM published in the last 30 days, plus any SugarCRM CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2023-22952 | 11 Jan 2023 | CVSS 8.8 | Multiple SugarCRM Products Remote Code ExecutionIn SugarCRM before 12.0. Hotfix 91155, a crafted request can inject custom PHP code through the EmailTemplates because of missing input validation. | Exploited |
| CVE-2023-22952 | 11 Jan 2023 | CVSS 8.8 | Multiple SugarCRM Products Remote Code ExecutionIn SugarCRM before 12.0. Hotfix 91155, a crafted request can inject custom PHP code through the EmailTemplates because of missing input validation. | Exploited |