SugarCRM vulnerabilities
2 published CVEs name SugarCRM among the affected products.
- 2Published CVEs2 of them scored
- 0Last 12 monthspublished in the last year
- 1Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2024-58258
SugarCRM before 13.0.4 and 14.x before 14.0.1 allows SSRF in the API module because a limited type of code injection can occur.
SugarCRM · SugarCRM
High7.2 - CVE-2025-25034
SugarCRM PHP Deserialization RCE
SugarCRM · SugarCRM
Critical9.3