Suitecrm vulnerabilities
68 CVEs and advisories name Suitecrm as an affected vendor, newest first. Follow it as a feed.
- CVE-2022-50589SuiteCRM < 7.12.6 SQL Injection via 'export' Functionality
- CVE-2025-41384Reflected Cross-Site Scripting (XSS) in SuiteCRM
- CVE-2025-54787SuiteCRM: Improper Authorization for attachment downloads
- CVE-2025-54784SuiteCRM is vulnerable to Cross Site Scripting (XSS) through its email viewer
- CVE-2025-54783SuiteCRM: Reflected Cross Site Scripting (XSS) through HTTP Referrer header
- CVE-2025-54788SuiteCRM: Authenticated Blind SQL Injection in InboundEmail module
- CVE-2025-54786SuiteCRM: Legacy iCal service allows unauthenticated access to meeting data
- CVE-2025-54785SuiteCRM is Vulnerable to PHP Object Injection in Reports