CVE-2022-45185

📊 8.8 HIGH⚡ 0.3%🎯 0 exploits

📅 Published Jan 7, 2025

📋 Status: Analyzed

An issue was discovered in SuiteCRM 7.12.7. Authenticated users can use CRM functions to upload malicious files. Then, deserialization can be used to achieve code execution.

CVSS v3.1 • 134c704f-9b21-4f2e-91b3-4a467353bcc0

🎯 Affected Products & Systems

1 product configurations affected

Filter by type:

Type	Vendor	Product	Version Range	Status	CPE String
📱App	salesagility	suitecrm	7.12.7	Vulnerable	cpe:2.3:a:salesagility:suitecrm:7.12.7:::::::*

📱

salesagility / suitecrm

Application

Vulnerable

Version: 7.12.7

CPE:

cpe:2.3:a:salesagility:suitecrm:7.12.7:*:*:*:*:*:*:*

Metrics

8.8 HIGHCVSS v3.1134c704f-9b21-4f2e-91b3-4a467353bcc0

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector:

NETWORK

Complexity:

LOW

Privileges:

LOW

User Interaction:

NONE

Confidentiality:

HIGH

Integrity:

HIGH

Availability:

HIGH

Scope:

UNCHANGED

🔍 Technical Details

Analysis Status

Analyzed

CVSS Details

8.8 (HIGH)v3.1

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

EPSS Details

0.3% (Minimal)50.4th percentile

Last updated: Oct 31, 2025

Exploitation probability within 30 days

Published Date

Jan 7, 2025 (9 months ago)

Last Modified

Apr 15, 2025 (6 months ago)

Security Weaknesses1

CWE-502

References2

NVDgeneral