CVE-2020-8804

SuiteCRM through 7.11.10 allows SQL Injection via the SOAP API, the EmailUIAjax interface, or the MailMerge module

published February 13, 2020

CVSS
—
EPSS
1%
Percentile
72.0
In the wild
Unconfirmed
What it is

SuiteCRM through 7.11.10 allows SQL Injection via the SOAP API, the EmailUIAjax interface, or the MailMerge module.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01385 · 72.0th percentile
Published
2020-02-13T15:15Z
EPSS history
Timeline
  • 13 FEB 15:15Z
    SuiteCRM through 7.11.10 allows SQL Injection via the SOAP API, the EmailUIAjax interface, or the MailMerge module
    cvelistv5