CVE-2019-12599: SQL Injection
Published Jun 7, 2019
·Updated
SuiteCRM 7.10.x before 7.10.17 and 7.11.x before 7.11.5 allows SQL Injection.
Affected Software
2 affected components
SalesAgility SuiteCRM>=7.10.0<7.10.17
SalesAgility SuiteCRM>=7.11.0<7.11.5
Event History
Jun 7, 2019
CVE Published
via MITRE·05:38 PM
Data Sourced
via MITRE·05:38 PM
Description
Frequently Asked Questions
1
What is CVE-2019-12599?
CVE-2019-12599 is a vulnerability in SuiteCRM 7.10.x before 7.10.17 and 7.11.x before 7.11.5 that allows SQL Injection.
2
How severe is CVE-2019-12599?
CVE-2019-12599 has a severity rating of 9.8 (critical).
3
How does CVE-2019-12599 affect SuiteCRM?
CVE-2019-12599 affects SuiteCRM versions 7.10.x before 7.10.17 and 7.11.x before 7.11.5, allowing SQL Injection.
4
What is the CVE-2019-12599 fix?
To fix CVE-2019-12599, upgrade SuiteCRM to version 7.10.17 or 7.11.5.
5
Where can I find more information about CVE-2019-12599?
You can find more information about CVE-2019-12599 at https://docs.suitecrm.com/admin/releases/7.11.x/#_7_11_5.