Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2025/11/10 5:22 a.m.•20 views

CVE-2025-64490

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Versions 7.14.7 and prior, 8.0.0-beta.1 through 8.9.0 allow a low-privileged user with a restrictive role to view and create work items through the Resource Calendar and project screens, even...

8.3CVSS7.6AI score0.00284EPSS
SaveExploits0References1
Mend
Mend
•added 2025/11/08 12:22 a.m.•7 views

CVE-2025-64490

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Versions 7.14.7 and prior, 8.0.0-beta.1 through 8.9.0 allow a low-privileged user with a restrictive role to view and create work items through the Resource Calendar and project screens, even...

8.7CVSS7.5AI score0.00284EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/11/08 12:22 a.m.•18 views

EUVD-2025-38348

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Versions 7.14.7 and prior, 8.0.0-beta.1 through 8.9.0 allow a low-privileged user with a restrictive role to view and create work items through the Resource Calendar and project screens, even...

8.3CVSS7.6AI score0.00284EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/11/08 12:22 a.m.•27 views

CVE-2025-64490 SuiteCRM's Inconsistent RBAC Enforcement Enables Access Control Bypass

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Versions 7.14.7 and prior, 8.0.0-beta.1 through 8.9.0 allow a low-privileged user with a restrictive role to view and create work items through the Resource Calendar and project screens, even...

8.3CVSS0.00284EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/11/08 12:22 a.m.•21 views

CVE-2025-64490 SuiteCRM's Inconsistent RBAC Enforcement Enables Access Control Bypass

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Versions 7.14.7 and prior, 8.0.0-beta.1 through 8.9.0 allow a low-privileged user with a restrictive role to view and create work items through the Resource Calendar and project screens, even...

8.3CVSS7.5AI score0.00284EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/08 12:00 a.m.•11 views

CVE-2025-64490: Incorrect Authorization

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Versions 7.14.7 and prior, 8.0.0-beta.1 through 8.9.0 allow a low-privileged user with a restrictive role to view and create work items through the Resource Calendar and project screens, even...

8.3CVSS7.6AI score0.00284EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/06 12:00 a.m.•21 views

PT-2025-45499

Name of the Vulnerable Software and Affected Versions SuiteCRM versions 7.14.7 and prior SuiteCRM versions 8.0.0-beta.1 through 8.9.0 Description SuiteCRM is a Customer Relationship Management CRM software application. Low-privileged users with restrictive roles can view and create work items...

8.7CVSS7.7AI score0.00284EPSS
SaveExploits0References10
Rows per page
Query Builder