CVE-2024-36410

8.8 highEPSS 0.4%

High (8.8) in salesagility suitecrm. EPSS 0.4% chance of exploitation in the next 30 days.

SuiteCRM is an open-source Customer Relationship Management (CRM) software application. In versions prior to 7.14.4 and 8.6.1, poor input validation allows for SQL Injection in EmailUIAjax messages count controller. Versions 7.14.4 and 8.6.1 contain a fix for this issue.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2024-06-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

salesagility:suitecrm

References

https://github.com/salesagility/SuiteCRM/security/advisories/GHSA-7jj8-m2wj-m6xq
https://github.com/salesagility/SuiteCRM/security/advisories/GHSA-7jj8-m2wj-m6xq

Check your stack JSON