Approved changes feed: RSS · Atom

cpe:2.3:a:salesagility:suitecrm:7.14.2:*:*:*:*:*:*:*

part: a version: 7.14.2 update: *

VendorSalesagility (916b6370-ebfb-5d4e-8dbe-d9e81235e5f5)
ProductSuitecrm (a221dfca-d49b-5c7f-8e45-fb4130d54600)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/salesagility/suitecrm purl2cpe 2026-06-01 10:13:42.188902
pkg:suitecrm/suitecrm purl2cpe 2026-06-01 10:13:42.188904

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-1644 vulnerable 2026-06-08 06:27:13.965331 Suite CRM v7.14.2 - RCE via Local File Inclusion
CRITICAL (9.9)
Suite CRM version 7.14.2 allows including local php files. This is possible because the application is vulnerable to LFI.
Published: 2024-02-19T23:54:29.274Z
Updated: 2024-08-01T18:48:22.061Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6388 vulnerable 2026-06-08 06:19:47.100252 Suite CRM v7.14.2 - SSRF
MEDIUM (5)
Suite CRM version 7.14.2 allows making arbitrary HTTP requests through the vulnerable server. This is possible because the application is vulnerable to SSRF.
Published: 2024-02-07T02:47:59.391Z
Updated: 2025-09-29T18:05:47.532Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.