CVE-2009-3258: Vtiger CRM

High severity, CVSS 9.0. EPSS: 1.7% chance of exploitation in the next 30 days.

vtiger CRM before 5.1.0 allows remote authenticated users, with certain View privileges, to delete (1) attachments, (2) reports, (3) filters, (4) views, and (5) tickets; insert (6) attachments, (7) reports, (8) filters, (9) views, and (10) tickets; and edit (11) reports, (12) filters, (13) views, and (14) tickets via unspecified vectors.

Affected products

• Vtiger Vtiger CRM: version 1.0 only; version 2.0 only; version 2.0.1 only; version 2.1 only; version 3 only; version 3.0 only; …

Published 2009-09-18. Last modified 2026-06-16.