CVE-2004-1606: Best Software Saleslogix

Medium severity, CVSS 6.4. EPSS: 2% chance of exploitation in the next 30 days.

slxweb.dll in SalesLogix 6.1 allows remote attackers to cause a denial service (application crash) via an invalid HTTP request, which might also leak sensitive information in the ErrorLogMsg cookie.

Affected products

• Best Software Saleslogix: any version
• Saleslogix Corporation Saleslogix: version 2000.0 only

Published 2004-10-18. Last modified 2026-06-16.