Lucene search
K

4 matches found

NVD
NVD
added 2024/06/10 6:15 p.m.17 views

CVE-2024-36409

SuiteCRM is an open-source Customer Relationship Management CRM software application. In versions prior to 7.14.4 and 8.6.1, poor input validation allows for SQL Injection in Tree data entry point. Versions 7.14.4 and 8.6.1 contain a fix for this issue...

9.6CVSS0.00286EPSS
Exploits0References1
CVE
CVE
added 2024/06/10 5:21 p.m.57 views

CVE-2024-36409

CVE-2024-36409 affects SuiteCRM before versions 7.14.4 and 8.6.1, where poor input validation enables an SQL Injection at the Tree data entry point. The root cause is inadequate input validation in the Tree entry point, allowing crafted input to alter database queries. Public advisories consisten...

9.6CVSS9.5AI score0.00286EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2024/06/10 5:21 p.m.9 views

CVE-2024-36409 SuiteCRM authenticated SQL Injection in TreeData entrypoint

SuiteCRM is an open-source Customer Relationship Management CRM software application. In versions prior to 7.14.4 and 8.6.1, poor input validation allows for SQL Injection in Tree data entry point. Versions 7.14.4 and 8.6.1 contain a fix for this issue...

9.6CVSS7.8AI score0.00286EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/06/10 12:0 a.m.2 views

SuiteCRM Security Breach

SuiteCRM is a customer relationship management system from the SuiteCRM team. SuiteCRM has a security vulnerability that stems from Inadequate input validation can lead to a SQL injection vulnerability at the Tree data entry point...

9.6CVSS8AI score0.00286EPSS
Exploits0References2
Rows per page
Query Builder