Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-28943PUBLISHED: 2021-04-30OX App Suite 7.10.4 and earlier allows SSRF via a snippet.
CVE-2020-28944PUBLISHED: 2021-04-30OX Guard 2.10.4 and earlier allows a Denial of Service via a WKS server that responds slowly or with a large amount of data.
CVE-2021-31792PUBLISHED: 2021-04-30XSS in the client account page in SuiteCRM before 7.11.19 allows an attacker to inject JavaScript via the name field
CVE-2021-31934PUBLISHED: 2021-04-30OX App Suite 7.10.4 and earlier allows XSS via a crafted contact object (payload in the position or company field) that is mishandled in the App Suite UI on a smartphone.
CVE-2021-31935PUBLISHED: 2021-04-30OX App Suite 7.10.4 and earlier allows XSS via a crafted distribution list (payload in the common name) that is mishandled in the scheduling view.