VULNERABILITY INTELLIGENCE

CVE-2019-17309

CVSS score7.2 HIGH

EPSS probability1.35%

CISA KEVNot currently listed

Published2019-10-07

Last modified2026-06-17

Description

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the EmailMan module by an Admin user.