VULNERABILITY INTELLIGENCE

CVE-2024-36410

CVSS score9.6 CRITICAL
EPSS probability0.42%
CISA KEVNot currently listed
Published2024-06-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

Description

SuiteCRM is an open-source Customer Relationship Management (CRM) software application. In versions prior to 7.14.4 and 8.6.1, poor input validation allows for SQL Injection in EmailUIAjax messages count controller. Versions 7.14.4 and 8.6.1 contain a fix for this issue.

Weakness classification

  • security-advisories@github.com: CWE-89
  • nvd@nist.gov: CWE-89

Primary references