Vtiger Vulnerabilità

Sequenza temporale

Genere

Prodotto

vTiger CRM28
vtiger CRM27
Vtiger CRM4

Contromisure

Official Fix34
Temporary Fix0
Workaround1
Unavailable0
Not Defined24

Sfruttabilità

High8
Functional0
Proof-of-Concept19
Unproven0
Not Defined32

Accesso al vettore

Not Defined0
Physical0
Local0
Adjacent1
Network58

Autenticazione

Not Defined0
High1
Low31
None27

Interazione dell'utente

Not Defined0
Required19
None40

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤45
≤519
≤67
≤712
≤813
≤92
≤101

CVSSv3 Temp

≤10
≤20
≤31
≤48
≤515
≤616
≤78
≤89
≤91
≤101

VulDB

≤10
≤20
≤30
≤48
≤518
≤65
≤716
≤89
≤92
≤101

NVD

≤10
≤20
≤30
≤40
≤50
≤61
≤73
≤82
≤94
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Fornitore

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 giorni

<1k6
<2k28
<5k25
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k58
<2k1
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Sfrutta il volume del mercato

🔴 CTI Attività

Affected Products (1): CRM (59)

Link to Vendor Website: https://www.vtiger.com/

Data di pubblicazioneBaseTempVulnerabilitàProdSfrConEPSSCTICVE
15/09/20237.57.5vTiger CRM ReportRun.php getQueryColumnsList sql injectionCustomer Relationship Management SystemNot DefinedNot Defined0.000550.00CVE-2023-38891
28/09/20224.44.4Vtiger CRM E-Mail Template cross site scriptingCustomer Relationship Management SystemNot DefinedNot Defined0.000670.02CVE-2022-38335
30/04/20216.36.3vTiger CRM Calendar Export sql injectionCustomer Relationship Management SystemNot DefinedNot Defined0.003230.02CVE-2020-22807
20/01/20215.05.0vTiger CRM libraries rivelazione di un 'informazioneCustomer Relationship Management SystemNot DefinedNot Defined0.001800.02CVE-2020-19363
20/01/20214.84.8vTiger CRM index.php cross site scriptingCustomer Relationship Management SystemNot DefinedNot Defined0.000750.03CVE-2020-19362
21/11/20197.57.4vTiger CRM My Preferences escalazione di privilegiCustomer Relationship Management SystemNot DefinedOfficial Fix0.001090.00CVE-2019-19202
06/06/20195.25.2vTiger CRM Reflected cross site scriptingCustomer Relationship Management SystemNot DefinedNot Defined0.001470.02CVE-2018-8047
24/05/20197.57.5vTiger CRM Activity.php sql injectionCustomer Relationship Management SystemNot DefinedNot Defined0.000970.07CVE-2016-10754
17/05/20197.57.2vTiger CRM sql injectionCustomer Relationship Management SystemNot DefinedOfficial Fix0.002280.00CVE-2019-11057
04/01/20195.95.6vTiger CRM Logo Upload CompanyDetailsSave.php escalazione di privilegiCustomer Relationship Management SystemProof-of-ConceptOfficial Fix0.067230.02CVE-2019-5009

49 non vengono visualizzate più voci

Do you want to use VulDB in your project?

Use the official API to access entries easily!