Zurmo

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 9
    Known Exploited: 0
    0
    Critical Level Threats
    0
    High Level Threats
    8
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2019-14472

    Zurmo 3.2.7-2 has XSS via the app/index.php/zurmo/default PATH_INFO.

    Last Modified: Nov 21, 2024
    Published: Aug 01, 2019

    CVE-2018-19596

    Zurmo 3.2.4 allows HTML Injection via an admin's use of HTML in the report section, a related issue to CVE-2018-19506.

    Last Modified: Nov 21, 2024
    Published: Dec 19, 2018

    CVE-2018-19506

    Zurmo 3.2.4 has XSS via an admin's use of the name parameter in the reports section, aka the app/index.php/reports/default/details?id=1 URI.

    Last Modified: Nov 21, 2024
    Published: Dec 19, 2018

    CVE-2018-16654

    Zurmo 3.2.4 Stable allows XSS via app/index.php/accounts/default/details?id=2&kanbanBoard=1&openToTaskId=1.

    Last Modified: Nov 21, 2024
    Published: Sep 07, 2018

    CVE-2017-18004

    Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint.

    Last Modified: Apr 20, 2025
    Published: Dec 31, 2017
    Items Per Page