CVE-2019-6506

CRITICAL

SuiteCRM < 7.8.28, 7.9.x, < 7.10.15, < 7.11.3 - SQL Injection

Title source: llm
STIX 2.1

Description

SuiteCRM before 7.8.28, 7.9.x and 7.10.x before 7.10.15, and 7.11.x before 7.11.3 allows SQL Injection.

References (5)

Core 5

Scores

CVSS v3 9.8
EPSS 0.0170
EPSS Percentile 74.6%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-89
Status published
Products (1)
salesagility/suitecrm 7.11.0
Published Apr 02, 2019
Tracked Since Feb 18, 2026