Approved changes feed: RSS · Atom

cpe:2.3:a:yetiforce:yetiforce_customer_relationship_management:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorYetiforce (dee6580a-b7f4-56be-b7b9-0504b306ca61)
ProductYetiforce Customer Relationship Management (7d379014-c73d-5096-8067-2a58d64896c8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:docker/yetiforce/yetiforcecrm purl2cpe 2026-06-01 10:12:49.613755
pkg:github/yetiforcecompany/yetiforcecrm purl2cpe 2026-06-01 10:12:49.613757

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-49508 vulnerable 2026-06-08 06:14:29.145604 Details available
Directory Traversal vulnerability in YetiForceCompany YetiForceCRM versions 6.4.0 and before allows a remote authenticated attacker to obtain sensitive information via the license parameter in the LibraryLicense.php component.
Published: 2024-02-16T00:00:00.000Z
Updated: 2025-03-27T14:56:06.484Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3005 vulnerable 2026-06-08 05:47:19.026746 Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm
MEDIUM (5.4)
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
Published: 2022-09-20T10:15:26.000Z
Updated: 2025-05-27T18:06:43.368Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3004 vulnerable 2026-06-08 05:47:19.026222 Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm
MEDIUM (6.3)
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
Published: 2022-09-20T09:40:09.000Z
Updated: 2025-05-27T18:06:01.242Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3002 vulnerable 2026-06-08 05:47:19.025658 Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm
MEDIUM (5.4)
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
Published: 2022-10-06T00:00:00.000Z
Updated: 2024-08-03T00:52:59.883Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3000 vulnerable 2026-06-08 05:47:19.016125 Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm
MEDIUM (6.3)
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
Published: 2022-09-20T07:10:09.000Z
Updated: 2025-05-29T13:39:36.316Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2924 vulnerable 2026-06-08 05:43:36.721179 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2890 vulnerable 2026-06-08 05:43:36.668744 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2885 vulnerable 2026-06-08 05:43:36.663822 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2829 vulnerable 2026-06-08 05:43:36.580013 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1411 vulnerable 2026-06-08 05:39:13.124314 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1340 vulnerable 2026-06-08 05:39:12.762852 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0269 vulnerable 2026-06-08 05:39:09.642315 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-4121 vulnerable 2026-06-08 05:38:08.457410 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-4117 vulnerable 2026-06-08 05:38:08.448524 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-4116 vulnerable 2026-06-08 05:38:08.447971 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-4111 vulnerable 2026-06-08 05:38:08.436328 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-4107 vulnerable 2026-06-08 05:38:08.432411 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-4092 vulnerable 2026-06-08 05:38:08.326074 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.