Approved changes feed: RSS · Atom

cpe:2.3:a:vtiger:vtiger_crm:7.2.0:*:*:*:*:*:*:*

part: a version: 7.2.0 update: *

VendorVtiger (89c2c1fd-beb5-5812-adce-99178d2f98e1)
ProductVtiger Crm (db56b9a5-457e-50d1-9abc-804932f49ea0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/vtiger-crm/vtigercrm purl2cpe 2026-06-01 10:15:56.210672
pkg:sourceforge/vtigercrm purl2cpe 2026-06-01 10:15:56.210674

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-22807 vulnerable 2026-06-08 05:22:31.656707 Details available
An issue was dicovered in vtiger crm 7.2. Union sql injection in the calendar exportdata feature.
Published: 2021-04-29T18:17:51.000Z
Updated: 2024-08-04T14:51:11.131Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-19363 vulnerable 2026-06-08 05:20:57.290059 Details available
Vtiger CRM v7.2.0 allows an attacker to display hidden files, list directories by using /libraries and /layout directories.
Published: 2021-01-20T00:43:54.000Z
Updated: 2024-08-04T14:08:30.805Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-19362 vulnerable 2026-06-08 05:20:57.289634 Details available
Reflected XSS in Vtiger CRM v7.2.0 in vtigercrm/index.php? through the view parameter can result in an attacker performing malicious actions to users who open a maliciously crafted link or third-party web page.
Published: 2021-01-20T00:42:56.000Z
Updated: 2024-08-04T14:08:30.667Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.