Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2023-12-05	CVE-2023-46736	Server-Side Request Forgery (SSRF) vulnerability in Espocrm EspoCRM is an Open Source CRM (Customer Relationship Management) software. network low complexity espocrm CWE-918	6.5
2022-09-16	CVE-2022-38845	Cross-site Scripting vulnerability in Espocrm 7.1.8 Cross Site Scripting in Import feature in EspoCRM 7.1.8 allows remote users to run malicious JavaScript in victim s browser via sending crafted csv file containing malicious JavaScript to authenticated user. network low complexity espocrm CWE-79	6.1
2019-07-28	CVE-2019-14351	Improper Restriction of Excessive Authentication Attempts vulnerability in Espocrm 5.6.4 EspoCRM 5.6.4 is vulnerable to user password hash enumeration. network low complexity espocrm CWE-307	4.0
2019-07-28	CVE-2019-14350	Cross-site Scripting vulnerability in Espocrm 5.6.4 EspoCRM 5.6.4 is vulnerable to stored XSS due to lack of filtration of user-supplied data in the Knowledge base. network espocrm CWE-79	4.3
2019-07-28	CVE-2019-14349	Cross-site Scripting vulnerability in Espocrm 5.6.4 EspoCRM version 5.6.4 is vulnerable to stored XSS due to lack of filtration of user-supplied data in the api/v1/Document functionality for storing documents in the account tab. network espocrm CWE-79	4.3
2019-07-28	CVE-2019-14331	Cross-site Scripting vulnerability in Espocrm An issue was discovered in EspoCRM before 5.6.6. network espocrm CWE-79	4.3
2019-07-28	CVE-2019-14330	Cross-site Scripting vulnerability in Espocrm An issue was discovered in EspoCRM before 5.6.6. network espocrm CWE-79	4.3
2019-07-28	CVE-2019-14329	Cross-site Scripting vulnerability in Espocrm An issue was discovered in EspoCRM before 5.6.6. network espocrm CWE-79	4.3
2019-07-18	CVE-2019-13643	Cross-site Scripting vulnerability in Espocrm Stored XSS in EspoCRM before 5.6.4 allows remote attackers to execute malicious JavaScript and inject arbitrary source code into the target pages. network espocrm CWE-79	4.3
2018-09-21	CVE-2018-17302	Cross-site Scripting vulnerability in Espocrm 5.3.6 Stored XSS exists in views/fields/wysiwyg.js in EspoCRM 5.3.6 via a /#Email/view saved draft message. network low complexity espocrm CWE-79	5.4