Vulnerability Database

300,214

Total vulnerabilities in the database

CVE-2024-36410

SuiteCRM is an open-source Customer Relationship Management (CRM) software application. In versions prior to 7.14.4 and 8.6.1, poor input validation allows for SQL Injection in EmailUIAjax messages count controller. Versions 7.14.4 and 8.6.1 contain a fix for this issue.

  • Published: Jun 10, 2024
  • Updated: Jun 13, 2024
  • CVE: CVE-2024-36410
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.8
  • AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWEs:

OWASP TOP 10:

Software From Fixed in
salesagility / suitecrm - 7.14.4
salesagility / suitecrm 8.0.0 8.6.1