← Back

1crm

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
1crm

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
11crm
11crm
Jun 17, 2026
Sep 18, 2020
N/A· v4
8.6 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in 1CRM System through 8.6.7. An insecure direct object reference to internally stored files allows a remote attacker to access various sensitive information via an unauthenticated request with a...Show more
An issue was discovered in 1CRM System through 8.6.7. An insecure direct object reference to internally stored files allows a remote attacker to access various sensitive information via an unauthenticated request with a predictable URL.Show less
11crm
11crm On Premise
Jun 17, 2026
Aug 8, 2019
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
1CRM On-Premise Software 8.5.7 allows XSS via a payload that is mishandled during a Run Report operation.