CVE-2019-12600: SQL Injection
Published Jun 7, 2019
·Updated
SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 2 of 3).
Affected Software
5 affected components
SalesAgility SuiteCRM>=7.8.0<=7.8.5
SalesAgility SuiteCRM>=7.8.6<=7.8.11
SalesAgility SuiteCRM>=7.8.12<7.8.30
SalesAgility SuiteCRM>=7.10.0<7.10.17
SalesAgility SuiteCRM>=7.11.0<7.11.5
Event History
Jun 7, 2019
CVE Published
via MITRE·05:35 PM
Data Sourced
via MITRE·05:35 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for SuiteCRM?
The vulnerability ID for SuiteCRM is CVE-2019-12600.
2
What is the severity of CVE-2019-12600?
The severity of CVE-2019-12600 is critical with a CVSS score of 9.8.
3
What versions of SuiteCRM are affected by CVE-2019-12600?
SuiteCRM versions 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 are affected by CVE-2019-12600.
4
What is the CWE category for CVE-2019-12600?
The CWE category for CVE-2019-12600 is CWE-89.
5
How can I fix the SQL Injection vulnerability in SuiteCRM?
To fix the SQL Injection vulnerability in SuiteCRM, you should upgrade to version 7.8.30, 7.10.17, or 7.11.5 depending on your current version.