CVE-2019-12598: SQL Injection
Published Jun 7, 2019
·Updated
SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 1 of 3).
Affected Software
5 affected components
SalesAgility SuiteCRM>=7.8.0<=7.8.5
SalesAgility SuiteCRM>=7.8.6<=7.8.11
SalesAgility SuiteCRM>=7.8.12<7.8.30
SalesAgility SuiteCRM>=7.10.0<7.10.17
SalesAgility SuiteCRM>=7.11.0<7.11.5
Event History
Jun 7, 2019
CVE Published
via MITRE·05:36 PM
Data Sourced
via MITRE·05:36 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for SuiteCRM SQL Injection vulnerability?
The vulnerability ID for the SuiteCRM SQL Injection vulnerability is CVE-2019-12598.
2
What is the severity level of CVE-2019-12598?
The severity level of CVE-2019-12598 is critical with a CVSS score of 9.8.
3
How does SuiteCRM versions 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allow SQL Injection?
SuiteCRM versions 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allow SQL Injection due to a security issue.
4
Which versions of SuiteCRM are affected by the SQL Injection vulnerability?
Versions 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 of SuiteCRM are affected by the SQL Injection vulnerability.
5
How can I fix the SuiteCRM SQL Injection vulnerability?
To fix the SuiteCRM SQL Injection vulnerability, it is recommended to update to version 7.8.30, 7.10.17, or 7.11.5 of SuiteCRM.