← Back to browse · API

CVE-2024-36412

Severity
CRITICAL
CVSS
10.0
EPSS
0.05692
Risk score
41.99
CISA KEV
No
PoC
No
Published
2024-06-10
Modified
2024-08-02
First seen
2026-08-08
Aliases
EUVD-2024-36069
Products
SuiteCRM:SuiteCRM 8.0.0, < 8.6.1, SuiteCRM:SuiteCRM < 7.14.4
Sources
euvd EUVD-2024-36069

Description

SuiteCRM is an open-source Customer Relationship Management (CRM) software application. Prior to versions 7.14.4 and 8.6.1, a vulnerability in events response entry point allows for a SQL injection attack. Versions 7.14.4 and 8.6.1 contain a fix for this issue.

References