← Back

Cordys Crm

cordys_crm

Vendor: Fit2cloud • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-70981
1Fit2cloud
1Cordys Crm
Jun 17, 2026
Feb 12, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
CordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface (/user/list) via the departmentIds parameter.