# Vtiger Vtiger Crm


- [CVE-2020-22807](https://insights.sbomify.com/CVE-2020-22807/): SQL injection in n/a (critical 9.8)
- [CVE-2013-3215](https://insights.sbomify.com/CVE-2013-3215/): Auth bypass in n/a (critical 9.8)
- [CVE-2013-3214](https://insights.sbomify.com/CVE-2013-3214/): Code injection in n/a (critical 9.8)
- [CVE-2009-3250](https://insights.sbomify.com/CVE-2009-3250/): File upload in n/a (critical 9.0)
- [CVE-2009-3258](https://insights.sbomify.com/CVE-2009-3258/): Missing authorization in n/a (critical 9.0)
- [CVE-2023-38891](https://insights.sbomify.com/CVE-2023-38891/): SQL injection in n/a (high 8.8)
- [CVE-2013-3591](https://insights.sbomify.com/CVE-2013-3591/): File upload in vTiger CRM (high 8.8)
- [CVE-2015-6000](https://insights.sbomify.com/CVE-2015-6000/): File upload in Vtiger CRM (high 8.8)
- [CVE-2019-19202](https://insights.sbomify.com/CVE-2019-19202/): Privilege escalation in n/a (high 8.8)
- [CVE-2016-10754](https://insights.sbomify.com/CVE-2016-10754/): SQL injection in n/a (high 8.8)
- [CVE-2019-11057](https://insights.sbomify.com/CVE-2019-11057/): SQL injection in n/a (high 8.8)
- [CVE-2007-3599](https://insights.sbomify.com/CVE-2007-3599/): Missing authorization in n/a (high 8.5)

---
From sbomify Insights: https://insights.sbomify.com/products/vtiger/vtiger-crm/