Approved changes feed: RSS · Atom
cpe:2.3:a:salesagility:suitecrm:8.8.0:*:*:*:*:*:*:*
part: a version: 8.8.0 update: *
| Vendor | Salesagility (916b6370-ebfb-5d4e-8dbe-d9e81235e5f5) |
|---|---|
| Product | Suitecrm (a221dfca-d49b-5c7f-8e45-fb4130d54600) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-54786 |
vulnerable | 2026-06-08 07:33:13.212578 |
SuiteCRM: Legacy iCal service allows unauthenticated access to meeting data
MEDIUM (5.3)
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. In versions 7.14.6 and 8.8.0, the broken authentication in the legacy iCal service allows unauthenticated access to meeting data. An unauthenticated actor can view any user's meeting (calendar event) data given their username, related functionality allows user enumeration. This is fixed in versions 7.14.7 and 8.8.1.
Published: 2025-08-06T23:23:00.948Z
Updated: 2025-08-07T14:47:54.710Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54785 |
vulnerable | 2026-06-08 07:33:13.202730 |
SuiteCRM is Vulnerable to PHP Object Injection in Reports
HIGH (8.8)
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. In versions 7.14.6 and 8.8.0, user-supplied input is not validated/sanitized before it is passed to the unserialize function, which could lead to penetration, privilege escalation, sensitive data exposure, Denial of Service, cryptomining and ransomware. This issue is fixed in version 7.14.7 and 8.8.1.
Published: 2025-08-06T23:15:16.718Z
Updated: 2025-08-07T14:48:26.266Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.