GCVE - cpe:2.3:a:salesagility:suitecrm:8.4.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:salesagility:suitecrm:8.4.0:*:*:*:*:*:*:*

part: a version: 8.4.0 update: *

Vendor	Salesagility (`916b6370-ebfb-5d4e-8dbe-d9e81235e5f5`)
Product	Suitecrm (`a221dfca-d49b-5c7f-8e45-fb4130d54600`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/salesagility/suitecrm`	purl2cpe	2026-06-01 10:13:42.189405
`pkg:suitecrm/suitecrm`	purl2cpe	2026-06-01 10:13:42.189407

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-6131`	vulnerable	2026-06-08 06:19:46.289891	Code Injection in salesagility/suitecrm HIGH (7.2) Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2. Published: 2023-11-14T16:27:57.047Z Updated: 2024-08-30T18:31:54.604Z Open on db.gcve.eu Reference links https://huntr.com/bounties/5fa50b25-f6b1-408c-99df-4442c86c563f https://github.com/salesagility/suitecrm/commit/54bc56c3bd9f1db75408db1c1d7d652c3f5f71e9	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-6130`	vulnerable	2026-06-08 06:19:46.289055	Path Traversal: '\..\filename' in salesagility/suitecrm HIGH (7.5) Path Traversal: '\..\filename' in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2. Published: 2023-11-14T16:19:29.202Z Updated: 2024-08-30T18:34:42.366Z Open on db.gcve.eu Reference links https://huntr.com/bounties/22a27be9-f016-4daf-9887-c77eb3e1dc74 https://github.com/salesagility/suitecrm/commit/54bc56c3bd9f1db75408db1c1d7d652c3f5f71e9	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-6128`	vulnerable	2026-06-08 06:19:46.284305	Cross-site Scripting (XSS) - Reflected in salesagility/suitecrm MEDIUM (6.8) Cross-site Scripting (XSS) - Reflected in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2. Published: 2023-11-14T16:11:04.630Z Updated: 2025-01-08T16:15:02.112Z Open on db.gcve.eu Reference links https://huntr.com/bounties/51406547-1961-45f2-a416-7f14fd775d2d https://github.com/salesagility/suitecrm/commit/54bc56c3bd9f1db75408db1c1d7d652c3f5f71e9	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-6127`	vulnerable	2026-06-08 06:19:46.283604	Unrestricted Upload of File with Dangerous Type in salesagility/suitecrm MEDIUM (5.4) Unrestricted Upload of File with Dangerous Type in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2. Published: 2023-11-14T16:01:57.316Z Updated: 2024-08-30T19:22:19.569Z Open on db.gcve.eu Reference links https://huntr.com/bounties/bf10c72b-5d2e-4c9a-9bd6-d77bdf31027d https://github.com/salesagility/suitecrm/commit/54bc56c3bd9f1db75408db1c1d7d652c3f5f71e9	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-6126`	vulnerable	2026-06-08 06:19:46.282771	Code Injection in salesagility/suitecrm MEDIUM (4.3) Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2. Published: 2023-11-14T15:51:44.501Z Updated: 2025-01-08T16:15:49.313Z Open on db.gcve.eu Reference links https://huntr.com/bounties/e22a9be3-3273-42cb-bfcc-c67a1025684e https://github.com/salesagility/suitecrm/commit/54bc56c3bd9f1db75408db1c1d7d652c3f5f71e9	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-6125`	vulnerable	2026-06-08 06:19:46.281820	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-6124`	vulnerable	2026-06-08 06:19:46.280099	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.