← All advisories

Medium severity5.4NVD Advisory· Published Aug 12, 2020· Updated Jun 17, 2026

CVE-2020-17372

CVE-2020-17372

Description

SugarCRM before 10.1.0 (Q3 2020) allows XSS.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Sugarcrm/Sugarcrm2 versions
cpe:2.3:a:sugarcrm:sugarcrm:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sugarcrm:sugarcrm:*:*:*:*:*:*:*:*range: <10.1.0
- (no CPE)range: <10.1.0
SugarCRM/SugarCRMdescription

Patches

Vulnerability mechanics

References

5

packetstormsecurity.com/files/158847/SugarCRM-Cross-Site-Scripting.htmlnvdExploitThird Party Advisory
seclists.org/fulldisclosure/2020/Aug/7nvdExploitMailing ListThird Party Advisory
support.sugarcrm.com/Resources/Security/nvdVendor Advisory
support.sugarcrm.com/Resources/Security/sugarcrm-sa-2020-025nvdBroken LinkVendor Advisory
support.sugarcrm.com/Resources/Security/sugarcrm-sa-2020-026nvdBroken LinkVendor Advisory

News mentions

0

No linked articles in our index yet.