VendorsYetiForceyetiforce_customer_relationship_managementany version
Vulnerabilities

YetiForce Customer Relationship Management (YetiForce CRM) any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

18CVEs
CVE-2022-1411
Unrestructed file upload in yetiforcecompany/yetiforcecrm
Published 2022-05-05 · Modified
9.1EPSS 0.008
CVE-2022-2890
Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm
Published 2022-08-22 · Modified
9.0EPSS 0.009
CVE-2022-2829
Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm
Published 2022-08-23 · Modified
8.8EPSS 0.008
CVE-2022-0269
Cross-Site Request Forgery (CSRF) in yetiforcecompany/yetiforcecrm
Published 2022-01-24 · Modified
8.0EPSS 0.005
CVE-2021-4117
Business Logic Errors in yetiforcecompany/yetiforcecrm
Published 2021-12-15 · Modified
7.7EPSS 0.007
CVE-2021-4111
Business Logic Errors in yetiforcecompany/yetiforcecrm
Published 2021-12-15 · Modified
7.3EPSS 0.006
CVE-2022-2924
Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm
Published 2022-09-20 · Modified
7.1EPSS 0.008
CVE-2022-1340
Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm
Published 2022-08-22 · Modified
7.0EPSS 0.005
CVE-2022-2885
Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm
Published 2022-08-21 · Modified
6.7EPSS 0.005
CVE-2021-4116
Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm
Published 2021-12-15 · Modified
6.6EPSS 0.005
CVE-2023-49508
Directory Traversal vulnerability in YetiForceCompany YetiForceCRM versions 6.4.0 and before allows a remote authenticated attacker to obtain sensitive information via the license parameter in the LibraryLicense.php component.
Published 2024-02-16 · Modified
6.5EPSS 0.010
CVE-2021-4121
Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm
Published 2021-12-16 · Modified
6.4EPSS 0.008
CVE-2022-3000
Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm
Published 2022-09-20 · Modified
6.3EPSS 0.006
CVE-2022-3004
Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm
Published 2022-09-20 · Modified
6.3EPSS 0.006
CVE-2021-4107
Cross-site Scripting (XSS) - Reflected in yetiforcecompany/yetiforcecrm
Published 2021-12-14 · Modified
6.1EPSS 0.008
CVE-2022-3005
Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm
Published 2022-09-20 · Modified
5.4EPSS 0.006
CVE-2022-3002
Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm
Published 2022-10-06 · Modified
5.4EPSS 0.006
CVE-2021-4092
Cross-Site Request Forgery (CSRF) in yetiforcecompany/yetiforcecrm
Published 2021-12-11 · Modified
4.3EPSS 0.004