Yetiforce Yetiforce Customer Relationship Management — known CVE vulnerabilities

Every CVE whose affected-product data names Yetiforce Yetiforce Customer Relationship Management, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (18)

• CVE-2022-0269 — CVSS 8.0 (high): Cross-Site Request Forgery (CSRF) in Packagist yetiforce/yetiforce-crm prior to 6.3.0.
• CVE-2023-49508 — CVSS 6.5 (medium): Directory Traversal vulnerability in YetiForceCompany YetiForceCRM versions 6.4.0 and before allows a remote authenticated attacker to…
• CVE-2021-4121 — CVSS 6.1 (medium): yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2021-4107 — CVSS 6.1 (medium): yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2022-1411 — CVSS 6.1 (medium): Unrestructed file upload in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. Attacker can send malicious files to the…
• CVE-2022-2829 — CVSS 5.4 (medium): Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
• CVE-2021-4116 — CVSS 5.4 (medium): yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2022-1340 — CVSS 5.4 (medium): Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
• CVE-2022-3000 — CVSS 5.4 (medium): Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
• CVE-2022-3002 — CVSS 5.4 (medium): Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
• CVE-2022-3004 — CVSS 5.4 (medium): Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
• CVE-2022-3005 — CVSS 5.4 (medium): Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
• CVE-2022-2890 — CVSS 5.4 (medium): Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
• CVE-2022-2924 — CVSS 5.4 (medium): Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.3.
• CVE-2022-2885 — CVSS 4.8 (medium): Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
• CVE-2021-4117 — CVSS 4.3 (medium): yetiforcecrm is vulnerable to Business Logic Errors
• CVE-2021-4092 — CVSS 4.3 (medium): yetiforcecrm is vulnerable to Cross-Site Request Forgery (CSRF)
• CVE-2021-4111 — CVSS 4.3 (medium): yetiforcecrm is vulnerable to Business Logic Errors