BDU:2022-06277

No known exploitation. No EPSS score yet. A vendor fix is available.

CVSS 3.18.1High EPSS percentile—No score yet CISA KEVNot listedNo confirmed exploitation
No public exploit known FixVendor fixNo build named by the sources

Published 2022-10-18Updated 2022-10-18Sources: BDU

NVD CVE.org

What to do

The vendor has published a fix. Version details are below where the sources state them.

SalesAgility Limited SuiteCRMAffected: 7.12.5Upgrade to: not statedStated by: BDU

Versions as the sources state them. Full version matrix after sign-in

Is your organisation exposed?Request an assessment to establish which checks fit your systems.

What it is

From the CVE record

Уязвимость системы управления взаимоотношениями с клиентами SuiteCRM связана с недостатками разграничения доступа. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации или вызвать отказ в обслуживании с помощью параметра username учетной записи пользователя

In plain language

No plain-language summary for this CVE yet.

Exploitation

Where each signal puts this CVE on the scale from published to confirmed exploited.

CISA KEV: Not in the catalog. CISA has not confirmed exploitation.
Public exploits: No public exploit or proof of concept found in the sources we track.
EPSS: No EPSS score yet. New CVEs are usually scored within a few days.