CVE-2018-15606

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

An XSS issue was discovered in SalesAgility SuiteCRM 7.x before 7.8.21 and 7.10.x before 7.10.8, related to phishing an error message.

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Sep 26, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-156076.5In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 canCVE-2018-156086.1Zoho ManageEngine ADManager Plus 6.5.7 allows HTML Injection on the "AD Delegation" "Help Desk Technicians" screen.CVE-2018-156108.8A vulnerability in the one-X Portal component of Avaya IP Office allows an authenticated attacker to read and delete arbitrary files on the CVE-2018-156116.7A vulnerability in the local system administration component of Avaya Aura Communication Manager can allow an authenticated, privileged userCVE-2018-156128.8A CSRF vulnerability in the Runtime Config component of Avaya Aura Orchestration Designer could allow an attacker to add, change, or remove CVE-2018-156136.1A cross-site scripting (XSS) vulnerability in the Runtime Config component of Avaya Aura Orchestration Designer could result in malicious coCVE-2018-156145.4A vulnerability in the one-x Portal component of IP Office could allow an authenticated user to perform stored cross site scripting attacks CVE-2018-156154.4A vulnerability in the Supervisor component of Avaya Call Management System allows local administrative user to extract sensitive informatioCVE-2018-156169.8A vulnerability in the Web UI component of Avaya Aura System Platform could allow a remote, unauthenticated user to perform a targeted deserCVE-2018-156177.5A vulnerability in the "capro" (Call Processor) process component of Avaya Aura Communication Manager could allow a remote, unauthenticated CVE-2018-15635.4IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) is vulnerable to cross-site scripting. This vulCVE-2018-156316.5Improper access control in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote authentica
CVE-2018-15606: Medium severity, CVSS 6.1 | Vulnix