CVE-2019-18784: SQL Injection
Published Nov 6, 2019
·Updated
SuiteCRM 7.10.x versions prior to 7.10.21 and 7.11.x versions prior to 7.11.9 allow SQL Injection.
Affected Software
2 affected components
SalesAgility SuiteCRM>=7.10.0<7.10.21
SalesAgility SuiteCRM>=7.11.0<7.11.9
Event History
Nov 6, 2019
CVE Published
via MITRE·02:13 AM
Data Sourced
via MITRE·02:13 AM
Description
Frequently Asked Questions
1
What is CVE-2019-18784?
CVE-2019-18784 is a vulnerability in SuiteCRM 7.10.x versions prior to 7.10.21 and 7.11.x versions prior to 7.11.9 that allows SQL Injection.
2
How severe is CVE-2019-18784?
CVE-2019-18784 has a severity rating of 9.8 (critical).
3
How can I fix CVE-2019-18784?
To fix CVE-2019-18784, you should update SuiteCRM to version 7.10.21 or 7.11.9 or later.
4
Where can I find more information about CVE-2019-18784?
You can find more information about CVE-2019-18784 on the SuiteCRM documentation: [link 1](https://docs.suitecrm.com/admin/releases/7.10.x/) and [link 2](https://docs.suitecrm.com/admin/releases/7.11.x/).
5
What is the CWE ID of CVE-2019-18784?
The CWE ID of CVE-2019-18784 is 89 (SQL Injection).