What’s Vulnerable › Products

Vtiger CRM vulnerabilities

74 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your Vtiger CRM version is affected

Latest Vtiger CRM vulnerabilities

• CVE-2026-23698 — Vtiger CRM 8.4.0 Authenticated RCE via Module Import File Upload (CVSS 7.2)
• CVE-2026-23697 — Vtiger CRM < 8.4.0 Authenticated File Upload RCE via Documents Module (CVSS 8.8)
• CVE-2025-45753 — (CVSS 7.2)
• CVE-2025-45755 — (CVSS 6.1)
• CVE-2025-1618 — vTiger CRM index.php cross site scripting (CVSS 6.1)
• CVE-2024-54687 — (CVSS 6.1)
• CVE-2024-48119 — (CVSS 5.4)
• CVE-2024-44779 — (CVSS 9.6)
• CVE-2024-44778 — (CVSS 9.6)
• CVE-2024-44777 — (CVSS 9.6)
• CVE-2024-44776 — (CVSS 6.1)
• CVE-2024-42995 — (CVSS 8.3)
• CVE-2024-42994 — (CVSS 7.2)
• CVE-2023-46304 — (CVSS 8.1)
• CVE-2023-38891 — (CVSS 8.8)
• CVE-2022-38335 — (CVSS 5.4)
• CVE-2020-22807 — (CVSS 9.8)
• CVE-2020-19363 — (CVSS 6.5)
• CVE-2020-19362 — (CVSS 6.1)
• CVE-2013-3591 — (CVSS 8.8)
• CVE-2015-6000 — (CVSS 8.8)
• CVE-2013-3215 — (CVSS 9.8)
• CVE-2013-3214 — (CVSS 9.8)
• CVE-2013-3212 — (CVSS 8.1)
• CVE-2019-19202 — (CVSS 8.8)