Skip to content
OpenAdvisories

Vendor

Suite CRM

70 known vulnerabilities.

Products

SuiteCRM 62 SuiteCRM-Core 6 Suite CRM 2
All Critical High Medium Low Exploited only Public exploit

42 results · Clear filters · Feed

  • High 8.8
    CVE-2025-54788

    SuiteCRM: Authenticated Blind SQL Injection in InboundEmail module

    SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. In versions and below, the InboundEmail module allows the arbitrary execution of queries in the backend database, leading to SQL injection. This can have…

    Suite CRM SuiteCRM
  • High 8.8
    CVE-2025-54785

    SuiteCRM is Vulnerable to PHP Object Injection in Reports

    SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. In versions 7.14.6 and 8.8.0, user-supplied input is not validated/sanitized before it is passed to the unserialize function, which could lead to penetra…

    Suite CRM SuiteCRM