GCVE - cpe:2.3:a:salesagility:suitecrm:8.0:rc:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:salesagility:suitecrm:8.0:rc:*:*:*:*:*:*

part: a version: 8.0 update: rc

Vendor	Salesagility (`916b6370-ebfb-5d4e-8dbe-d9e81235e5f5`)
Product	Suitecrm (`a221dfca-d49b-5c7f-8e45-fb4130d54600`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/salesagility/suitecrm`	purl2cpe	2026-06-01 10:13:42.189355
`pkg:suitecrm/suitecrm`	purl2cpe	2026-06-01 10:13:42.189356

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-45899`	vulnerable	2026-06-08 05:36:49.537420	Details available SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows PHAR deserialization that can lead to remote code execution. Published: 2022-01-28T16:25:21.000Z Updated: 2024-08-04T04:54:30.929Z Open on db.gcve.eu Reference links https://docs.suitecrm.com/8.x/admin/releases/8.0/ https://docs.suitecrm.com/admin/releases/7.12.x/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-45898`	vulnerable	2026-06-08 05:36:49.536893	Details available SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows local file inclusion. Published: 2022-01-28T16:23:34.000Z Updated: 2024-08-04T04:54:31.348Z Open on db.gcve.eu Reference links https://docs.suitecrm.com/8.x/admin/releases/8.0/ https://docs.suitecrm.com/admin/releases/7.12.x/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-45897`	vulnerable	2026-06-08 05:36:49.536205	Details available SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows remote code execution. Published: 2022-01-28T16:21:31.000Z Updated: 2024-08-04T04:54:30.923Z Open on db.gcve.eu Reference links https://docs.suitecrm.com/8.x/admin/releases/8.0/ https://docs.suitecrm.com/admin/releases/7.12.x/ https://github.com/manuelz120/CVE-2021-45897	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-45041`	vulnerable	2026-06-08 05:36:47.720351	Details available SuiteCRM before 7.12.2 and 8.x before 8.0.1 allows authenticated SQL injection via the Tooltips action in the Project module, involving resource_id and start_date. Published: 2021-12-19T08:34:10.000Z Updated: 2024-08-04T04:32:13.600Z Open on db.gcve.eu Reference links https://docs.suitecrm.com/admin/releases/7.12.x/ https://docs.suitecrm.com/8.x/admin/releases/8.0/ https://github.com/manuelz120/CVE-2021-45041	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.