CVE-2004-1611: Best Software Saleslogix

Medium severity, CVSS 5.1. EPSS: 1.6% chance of exploitation in the next 30 days.

SalesLogix 6.1 does not verify if a user is authenticated before performing sensitive operations, which could allow remote attackers to (1) execute arbitrary SLX commands on the server or spoof the server via a man-in-the-middle (MITM) attack, or (2) obtain the database password via a GetConnection request to TCP port 1707.

Affected products

• Best Software Saleslogix: any version
• Saleslogix Corporation Saleslogix: version 2000.0 only

Published 2004-10-18. Last modified 2026-06-16.