Skip to content
OpenAdvisories

Vendor

SugarCRM

2 known vulnerabilities.

Products

SugarCRM 2 Sugar Enterprise < 1.1 Hotfix 91155 XXXX 0 Sugar Enterprise 0 Sugar Enterprise < 12.0.2 0 Sugar Enterprise < 11.0.5 0 Sugar Enterprise < 12.0.3 0 Sugar Enterprise < 11.0.6 0 Sugar Enterprise < 13.0.2 0 Sugar Enterprise < 12.0.4 0
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2024-58258 Public exploit EPSS 22%

    SugarCRM before 13.0.4 and 14.x before 14.0.1 allows SSRF in the API module because a limited type of code injection ca…

    SugarCRM SugarCRM
  • Critical 9.3
    CVE-2025-25034 Public exploit

    SugarCRM PHP Deserialization RCE

    A PHP object injection vulnerability exists in SugarCRM versions prior to 6.5.24, 6.7.13, 7.5.2.5, 7.6.2.2, and 7.7.1.0 due to improper validation of PHP serialized input in the SugarRestSerialize.php script. The vulnerable code fails to sanitize the rest_dat…

    SugarCRM SugarCRM