ZeusQA
Start free

Known exploited vulnerabilities

SugarCRM vulnerabilities attackers have used

Every SugarCRM vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 1 SugarCRM vulnerability as exploited in the wild, 0 of them added in the last 12 months. The most recent is CVE-2023-22952, added Feb 2, 2023. Multiple Products has the most entries (1).

In KEV, all time
1
Added, last 12 months
0
Used in ransomware
0
New CVEs this week
0

Every SugarCRM entry in CISA KEV

  1. CVE-2023-22952

    Added · due

    Multiple SugarCRM Products Remote Code Execution Vulnerability

    Multiple SugarCRM products contain a remote code execution vulnerability in the EmailTemplates. Using a specially crafted request, custom PHP code can be injected through the EmailTemplates.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works