CVE-2020-17373: SugarCRM

Medium severity, CVSS 5.3. EPSS: 1.4% chance of exploitation in the next 30 days.

SugarCRM before 10.1.0 (Q3 2020) allows SQL Injection.

Affected products

• SugarCRM SugarCRM: before 10.1.0 (fixed in 10.1.0)

Published 2020-08-12. Last modified 2026-06-17.