Sugarcrm Community Edition 漏洞

时间轴

版本

6.5.262

修正

Official Fix0
Temporary Fix0
Workaround0
Unavailable0
Not Defined2

易受攻击性

High0
Functional0
Proof-of-Concept2
Unproven0
Not Defined0

访问向量

Not Defined0
Physical0
Local0
Adjacent0
Network2

身份验证

Not Defined0
High0
Low0
None2

用户交互

Not Defined0
Required0
None2

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤62
≤70
≤80
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤50
≤62
≤70
≤80
≤90
≤100

VulDB

≤10
≤20
≤30
≤40
≤50
≤62
≤70
≤80
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k0
<2k2
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k2
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Versions (25): 6.5, 6.5.1, 6.5.2, 6.5.3, 6.5.4, 6.5.5, 6.5.6, 6.5.7, 6.5.8, 6.5.9, 6.5.11, 6.5.12, 6.5.13, 6.5.14, 6.5.15, 6.5.16, 6.5.17, 6.5.18, 6.5.19, 6.5.21, 6.5.22, 6.5.23, 6.5.24, 6.5.25, 6.5.26

已发布BaseTemp漏洞0day今天易修正CTICVE
2018-10-105.75.4SugarCRM Community Edition YUI/FlashCanvas 跨网站脚本$0-$5k$0-$5kProof-of-ConceptNot Defined0.00CVE-2018-17784
2018-01-258.58.5SugarCRM Community Edition Configurator Tracker.php SQL注入$0-$5k$0-$5kNot DefinedNot Defined0.06CVE-2018-6308

更多条目由 Sugarcrm

◂ 上一步一览下一步 ▸

Do you know our Splunk app?

Download it now for free!