CVE-2019-14974: SugarCRM

Medium severity, CVSS 6.1. EPSS: 28.4% chance of exploitation in the next 30 days.

SugarCRM Enterprise 9.0.0 allows mobile/error-not-supported-platform.html?desktop_url= XSS.

Affected products

• SugarCRM SugarCRM: version 9.0.0 only

Published 2019-08-14. Last modified 2026-06-17.