Skip to content
OpenAdvisories

Vendor

SugarCRM

2 known vulnerabilities.

Products

SugarCRM 2 Sugar Enterprise < 1.1 Hotfix 91155 XXXX 0 Sugar Enterprise 0 Sugar Enterprise < 12.0.2 0 Sugar Enterprise < 11.0.5 0 Sugar Enterprise < 12.0.3 0 Sugar Enterprise < 11.0.6 0 Sugar Enterprise < 13.0.2 0 Sugar Enterprise < 12.0.4 0
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2025-25034 Public exploit Scanner template

    SugarCRM PHP Deserialization RCE

    A PHP object injection vulnerability exists in SugarCRM versions prior to 6.5.24, 6.7.13, 7.5.2.5, 7.6.2.2, and 7.7.1.0 due to improper validation of PHP serialized input in the SugarRestSerialize.php script. The vulnerable code fails to sanitize the rest_dat…

    SugarCRM SugarCRM