Salesagility-limited
8 CVEs tracked since 2025. Since Nov 2025, none of them reached CISA KEV.
Salesagility-limited CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2025-11 | 8 | 0 |
| 2025-12 | 5 or fewer | |
| 2026-01 | 5 or fewer | |
| 2026-02 | 5 or fewer | |
| 2026-03 | 7 or fewer | |
| 2026-04 | 6 or fewer | |
| 2026-05 | 7 or fewer | |
| 2026-06 | 7 or fewer | |
| 2026-07 | 7 or fewer | |
| 2026-08 | 8 or fewer | |
| 2026-09 | 9 or fewer | |
| 2026-10 | 6 or fewer |
Products
The products that kept showing up in Salesagility-limited's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 14 most recently published vulnerabilities affecting Salesagility-limited.
- CVE-2025-64493SuiteCRM is Vulnerable to Authenticated Blind SQL Injection via GraphQL6.5
- CVE-2025-64492SuiteCRM is Vulnerable to Authenticated Time Based Blind SQL Injection8.8
- CVE-2025-64491SuiteCRM is vulnerable to unauthenticated reflected XSS through its Login page6.1
- CVE-2025-64490SuiteCRM's Inconsistent RBAC Enforcement Enables Access Control Bypass8.3
- CVE-2025-64489SuiteCRM: Privilege Escalation via Improper Session Invalidation and Inactive User Bypass8.3
- CVE-2025-64488SuiteCRM: Authenticated SQL Injection Possible in Reschedule Call Module8.8
- CVE-2022-50590SuiteCRM < 7.12.6 Type Confusion via 'deleteAttachment' Functionality5.3
- CVE-2022-50589SuiteCRM < 7.12.6 SQL Injection via 'export' Functionality9.8
- CVE-2025-54788SuiteCRM: Authenticated Blind SQL Injection in InboundEmail module8.8
- CVE-2022-45186An issue was discovered in SuiteCRM 7.12.7. Authenticated users can recover an arbitrary field of a database.8.1
- CVE-2024-1644Suite CRM v7.14.2 - RCE via Local File Inclusion9.9
- CVE-2023-6388Suite CRM v7.14.2 - SSRF5.0
- BDU:2022-06277Уязвимость системы управления взаимоотношениями с клиентами SuiteCRM, связанная с недостатками разграничения доступа, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации или вызвать отказ в обслуживании8.1
- BDU:2022-06190Уязвимость SMTP-сервера системы управления взаимоотношениями с клиентами SuiteCRM, позволяющая нарушителю оказать воздействие на целостность защищаемой информации6.5
The record
- Peak rank
- #97 in Nov 2025
- Busiest month shown
- Nov 2025, 8 CVEs
- Months with a KEV entry
- 0 since Nov 2025
- Monthly snapshots
- 1 since 2025