GCVE - cpe:2.3:a:salesagility:suitecrm:7.12.7:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:salesagility:suitecrm:7.12.7:*:*:*:*:*:*:*

part: a version: 7.12.7 update: *

Vendor	Salesagility (`916b6370-ebfb-5d4e-8dbe-d9e81235e5f5`)
Product	Suitecrm (`a221dfca-d49b-5c7f-8e45-fb4130d54600`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/salesagility/suitecrm`	purl2cpe	2026-06-01 10:13:42.188860
`pkg:suitecrm/suitecrm`	purl2cpe	2026-06-01 10:13:42.188862

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-45186`	vulnerable	2026-06-08 05:50:35.914335	Details available An issue was discovered in SuiteCRM 7.12.7. Authenticated users can recover an arbitrary field of a database. Published: 2025-01-07T00:00:00.000Z Updated: 2025-01-08T15:12:24.682Z Open on db.gcve.eu Reference links https://docs.suitecrm.com/admin/releases/7.12.x/ https://github.com/Orange-Cyberdefense/CVE-repository/ https://github.com/Orange-Cyberdefense/CVE-repository/blob/master/PoCs/poc_SuiteCRM.py	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-45185`	vulnerable	2026-06-08 05:50:35.913815	Details available An issue was discovered in SuiteCRM 7.12.7. Authenticated users can use CRM functions to upload malicious files. Then, deserialization can be used to achieve code execution. Published: 2025-01-07T00:00:00.000Z Updated: 2025-01-08T18:00:17.215Z Open on db.gcve.eu Reference links https://docs.suitecrm.com/admin/releases/7.12.x/ https://github.com/Orange-Cyberdefense/CVE-repository/ https://github.com/Orange-Cyberdefense/CVE-repository/blob/master/PoCs/poc_SuiteCRM.py	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.