Vtiger Crm Sårbarheter

Tidslinje

Version

4.2	23
5.0.2	21
5.0.4	18
4.2.4	16
5.0.3	14

Åtgärd

Official Fix	34
Temporary Fix	0
Workaround	1
Unavailable	0
Not Defined	24

Utnyttjbarhet

High	8
Functional	0
Proof-of-Concept	19
Unproven	0
Not Defined	32

Åtkomstvektor

Not Defined	0
Physical	0
Local	0
Adjacent	1
Network	58

Autentisering

Not Defined	0
High	1
Low	31
None	27

Användarinteraktion

Not Defined	0
Required	19
None	40

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	5
≤5	19
≤6	7
≤7	12
≤8	13
≤9	2
≤10	1

CVSSv3 Temp

≤1	0
≤2	0
≤3	1
≤4	8
≤5	15
≤6	16
≤7	8
≤8	9
≤9	1
≤10	1

VulDB

≤1	0
≤2	0
≤3	0
≤4	8
≤5	18
≤6	5
≤7	16
≤8	9
≤9	2
≤10	1

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	1
≤7	3
≤8	2
≤9	4
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Säljare

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Utnyttja 0-dagars

<1k	6
<2k	28
<5k	25
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Utnyttja idag

<1k	58
<2k	1
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (37): 1.0, 2.0, 2.0.1, 2.1, 3, 3.0, 3.2, 4, 4.0, 4.0.1, 4.2, 4.2.4, 5, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.1, 5.2, 5.2.1, 5.3, 5.4, 6, 6.0, 6.1, 6.2, 6.3, 6.4, 6.5, 7.0, 7.0.1, 7.1, 7.1.0 HF1, 7.1.0 Hotfix 2, 7.2, 7.4, 7.5

Link to Product Website: https://www.vtiger.com/

Programvarutyp: Customer Relationship Management System

Publicerad	Base	Temp	Sårbarhet	0day	I dag	Utn	Rem	CTI	CVE
15/09/2023	7.5	7.5	vTiger CRM ReportRun.php getQueryColumnsList sql injektion	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-38891
28/09/2022	4.4	4.4	Vtiger CRM E-Mail Template cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	CVE-2022-38335
30/04/2021	6.3	6.3	vTiger CRM Calendar Export sql injektion	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	CVE-2020-22807
20/01/2021	5.0	5.0	vTiger CRM libraries informationsgivning	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	CVE-2020-19363
20/01/2021	4.8	4.8	vTiger CRM index.php cross site scripting	$0-$5k	Beräknande	Not Defined	Not Defined	0.03	CVE-2020-19362
21/11/2019	7.5	7.4	vTiger CRM My Preferences privilegier eskalering	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2019-19202
06/06/2019	5.2	5.2	vTiger CRM Reflected cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	CVE-2018-8047
24/05/2019	7.5	7.5	vTiger CRM Activity.php sql injektion	$0-$5k	$0-$5k	Not Defined	Not Defined	0.07	CVE-2016-10754
17/05/2019	7.5	7.2	vTiger CRM sql injektion	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2019-11057
04/01/2019	5.9	5.6	vTiger CRM Logo Upload CompanyDetailsSave.php privilegier eskalering	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.02	CVE-2019-5009