espocrm
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 75 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 20, 2014 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →EspoCRM before 10.0.9 Stored XSS via Knowledge Base Article Attachments
EspoCRM before 10.0.8 Stored XSS via Malicious SVG Attachment
EspoCRM before 10.0.8 Stored XSS via Malicious SVG Attachment
EspoCRM before 9.3.11 and 10.0.8 Unauthenticated Denial of Service via Password-Redaction Regex
EspoCRM before 9.3.11 and 10.0.8 Unauthenticated Denial of Service via Password-Redaction Regex
EspoCRM PDF Rendering Pipeline ImageSourceProvider.php get authorization
EspoCRM: Access control bypass in Mass Update letting regular user with Mass Update permission read any attachment
EspoCRM: Mass email template renderer leaks restricted record fields
EspoCRM: Admin path traversal in LabelManager (Custom Label saving) allows arbitrary `.json` file read, write and delete
EspoCRM: Pre-authentication stored HTML injection in stream notification emails about email received
Monitor espocrm in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.