What is the CVSS score of CVE-2022-45186?

CVE-2022-45186 has a CVSS 3.1 base score of 8.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N. EPSS exploitation probability: 0.1%.

Which versions of Suitecrm are affected by CVE-2022-45186?

CVE-2022-45186 presents notable security risk rated CVSS 8.1. Successful exploitation could significantly impact the confidentiality, integrity, or availability of affected systems.

Is there a public PoC exploit available for CVE-2022-45186?

Yes, a public proof-of-concept exploit is available for CVE-2022-45186. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2022-45186?

Within 7 days: Identify all affected systems and apply vendor patches promptly. Monitor vendor channels for patch availability.

Suitecrm CVE-2022-45186

HIGH

2025-01-07 cve@mitre.org

Information Disclosure Suitecrm

8.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.1 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 18:02 vuln.today

PoC Detected

Apr 15, 2025 - 18:33 vuln.today

Public exploit code

CVE Published

Jan 07, 2025 - 20:15 nvd

HIGH 8.1

DescriptionCVE.org

An issue was discovered in SuiteCRM 7.12.7. Authenticated users can recover an arbitrary field of a database.

AnalysisAI

An issue was discovered in SuiteCRM 7.12.7. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

An issue was discovered in SuiteCRM 7.12.7. Authenticated users can recover an arbitrary field of a database. Affected products include: Salesagility Suitecrm.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Suitecrm

View all

CVE-2021-42840 HIGH Act Now POC

8.8 Oct 22

SuiteCRM before 7.11.19 allows remote code execution via the system settings Log File Name setting. Rated high severity

CVE-2020-28328 HIGH Act Now POC

8.8 Nov 06

SuiteCRM before 7.11.17 is vulnerable to remote code execution via the system settings Log File Name setting. Rated high

CVE-2024-36412 CRITICAL Act Now POC

9.8 Jun 10

SuiteCRM is an open-source Customer Relationship Management (CRM) software application. Rated critical severity (CVSS 9.

CVE-2023-6126 CRITICAL Act Now POC

9.8 Nov 14

Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2. Rated critical severity (CVSS

CVE-2023-5350 CRITICAL Act Now POC

9.1 Oct 03

SQL Injection in GitHub repository salesagility/suitecrm prior to 7.14.1. Rated critical severity (CVSS 9.1), this vulne

CVE-2015-5947 HIGH This Week POC

8.1 Sep 06

SuiteCRM before 7.2.3 allows remote attackers to execute arbitrary code. Rated high severity (CVSS 8.1), this vulnerabil

CVE-2022-45185 HIGH This Week POC

8.8 Jan 07

An issue was discovered in SuiteCRM 7.12.7. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable,

CVE-2024-1644 HIGH This Week POC

8.8 Feb 20

Suite CRM version 7.14.2 allows including local php files. Rated high severity (CVSS 8.8), this vulnerability is remotel

CVE-2023-6131 HIGH This Week POC

8.8 Nov 14

Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2. Rated high severity (CVSS 8.8

CVE-2023-6130 HIGH This Week POC

8.8 Nov 14

Path Traversal: '\..\filename' in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2. Rated high se

CVE-2023-6125 HIGH This Week POC

8.8 Nov 14

Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2. Rated high severity (CVSS 8.8

CVE-2023-3627 HIGH This Week POC

8.8 Jul 11

Cross-Site Request Forgery (CSRF) in GitHub repository salesagility/suitecrm-core prior to 8.3.1. Rated high severity (C

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

CVE-2022-45186 vulnerability details – vuln.today

Back

Suitecrm CVE-2022-45186

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in Suitecrm

Same technique Information Disclosure

Share

External POC / Exploit Code