CVE-2019-12601: Salesagility Suitecrm

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 3 of 3).

Affected products

• Salesagility Suitecrm: from 7.8.0, up to and including 7.8.5; from 7.8.6, up to and including 7.8.11; from 7.8.12, before 7.8.30 (fixed in 7.8.30); from 7.10.0, before 7.10.17 (fixed in 7.10.17); from 7.11.0, before 7.11.5 (fixed in 7.11.5)

Published 2019-06-07. Last modified 2026-06-17.