Approved changes feed: RSS · Atom

cpe:2.3:a:sugarcrm:sugarcrm:*:*:*:*:community:*:*:*

part: a version: * update: *

VendorSugarcrm (dd15fdac-9cd0-5ebf-98e7-767d21270f9e)
ProductSugarcrm (153c5dce-2939-55e9-8424-89afa76b32da)
Edition*
Language*
Software editioncommunity
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-17784 vulnerable 2026-06-08 05:11:06.713646 Details available
Multiple vulnerabilities in YUI and FlashCanvas embedded in SugarCRM Community Edition 6.5.26 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system.
Published: 2018-10-10T21:00:00.000Z
Updated: 2024-08-05T10:54:10.633Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0694 vulnerable 2026-06-08 05:00:44.511013 Details available
SugarCRM CE <= 6.3.1 contains scripts that use "unserialize()" with user controlled input which allows remote attackers to execute arbitrary PHP code.
Published: 2019-10-29T20:37:25.000Z
Updated: 2024-08-06T18:30:53.800Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.