PULSE
EN
FEED
ransomn0n reclama a Company #75 · US · Not Foundransomn0n reclama a Company #74 · US · Not Foundransomn0n reclama a Evolution Spine / All Labs · Healthcareransomincransom reclama a fairfeelegalservices.com · US · Professional Servicesransomincransom reclama a verveba.com \ www.att.com · US · Technologyransomincransom reclama a www.coopecaja.fi.cr · CR · Financial Servicesransomincransom reclama a nowaszkola.com · PL · Educationransomqilin reclama a Keio Corporation · JP · Transportationransomqilin reclama a Kemlows Diecasting Products Limited · GB · Manufacturingransomqilin reclama a Telcoe Federal Credit Union · US · Financial Servicesransomwallstreet reclama a TGM Manufacturing, Inc · US · Manufacturingransomqilin reclama a Segres Systec · ES · Technologyransomqilin reclama a Shield Wall Systems of Florida · US · Government & Defenseransomqilin reclama a The Excalibur Group · US · Otherransomn0n reclama a Company #75 · US · Not Foundransomn0n reclama a Company #74 · US · Not Foundransomn0n reclama a Evolution Spine / All Labs · Healthcareransomincransom reclama a fairfeelegalservices.com · US · Professional Servicesransomincransom reclama a verveba.com \ www.att.com · US · Technologyransomincransom reclama a www.coopecaja.fi.cr · CR · Financial Servicesransomincransom reclama a nowaszkola.com · PL · Educationransomqilin reclama a Keio Corporation · JP · Transportationransomqilin reclama a Kemlows Diecasting Products Limited · GB · Manufacturingransomqilin reclama a Telcoe Federal Credit Union · US · Financial Servicesransomwallstreet reclama a TGM Manufacturing, Inc · US · Manufacturingransomqilin reclama a Segres Systec · ES · Technologyransomqilin reclama a Shield Wall Systems of Florida · US · Government & Defenseransomqilin reclama a The Excalibur Group · US · Other
← Todos los CVEs
CVE Watch—

CVE-2023-22952

Multiple SugarCRM Products Remote Code Execution Vulnerability

CVSS

—

Sin CVSS

EPSS

80.1%

p100

KEV

SÍ

2 feb 2023

Exploit Today

80

0-100

Publicado: — · Última mod.: —

EPSS · 30d
80.1%EPSS · 30 días80.1%
2026-09-172026-10-15
Ficha del catálogo KEV

Producto

SugarCRM / Multiple Products

Vulnerabilidad

Multiple SugarCRM Products Remote Code Execution Vulnerability

Añadido a KEV

2 feb 2023

Remediar antes de

23 feb 2023

Uso conocido en ransomware

No

Descripción resumida

Multiple SugarCRM products contain a remote code execution vulnerability in the EmailTemplates. Using a specially crafted request, custom PHP code can be injected through the EmailTemplates.

Acción requerida

Apply updates per vendor instructions.

Notas

https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2023-001/; https://nvd.nist.gov/vuln/detail/CVE-2023-22952

CVEs relacionados

Sin CVEs relacionados por CWE o producto.