Skip to content
OpenAdvisories

Vendor

Suite CRM

70 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.7
    CVE-2026-69137 Public exploit Scanner template

    SuiteCRM: Authenticated SSRF in CalendarAccount testConnection Allows Internal Network Access and Response Disclosure

    SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to 7.15.2 and 8.10.2, the CalendarAccount testConnection action passes an authenticated caller's server_url directly to curl without host, address,…