Vulnerabilities > Espocrm
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-07-28 | CVE-2019-14351 | Improper Restriction of Excessive Authentication Attempts vulnerability in Espocrm 5.6.4 EspoCRM 5.6.4 is vulnerable to user password hash enumeration. | 4.0 |
| 2019-07-28 | CVE-2019-14350 | Cross-site Scripting vulnerability in Espocrm 5.6.4 EspoCRM 5.6.4 is vulnerable to stored XSS due to lack of filtration of user-supplied data in the Knowledge base. | 4.3 |
| 2019-07-28 | CVE-2019-14349 | Cross-site Scripting vulnerability in Espocrm 5.6.4 EspoCRM version 5.6.4 is vulnerable to stored XSS due to lack of filtration of user-supplied data in the api/v1/Document functionality for storing documents in the account tab. | 4.3 |
| 2019-07-28 | CVE-2019-14331 | Cross-site Scripting vulnerability in Espocrm An issue was discovered in EspoCRM before 5.6.6. | 4.3 |
| 2019-07-28 | CVE-2019-14330 | Cross-site Scripting vulnerability in Espocrm An issue was discovered in EspoCRM before 5.6.6. | 4.3 |
| 2019-07-28 | CVE-2019-14329 | Cross-site Scripting vulnerability in Espocrm An issue was discovered in EspoCRM before 5.6.6. | 4.3 |
| 2019-07-18 | CVE-2019-13643 | Cross-site Scripting vulnerability in Espocrm Stored XSS in EspoCRM before 5.6.4 allows remote attackers to execute malicious JavaScript and inject arbitrary source code into the target pages. | 4.3 |
| 2018-09-21 | CVE-2018-17302 | Cross-site Scripting vulnerability in Espocrm 5.3.6 Stored XSS exists in views/fields/wysiwyg.js in EspoCRM 5.3.6 via a /#Email/view saved draft message. | 5.4 |
| 2018-09-21 | CVE-2018-17301 | Cross-site Scripting vulnerability in Espocrm 5.3.6 Reflected XSS exists in client/res/templates/global-search/name-field.tpl in EspoCRM 5.3.6 via /#Account in the search panel. | 3.5 |
| 2014-10-31 | CVE-2014-7987 | Cross-Site Scripting vulnerability in Espocrm Cross-site scripting (XSS) vulnerability in EspoCRM before 2.6.0 allows remote attackers to inject arbitrary web script or HTML via the desc parameter in an errors action to install/index.php. | 4.3 |