[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2017-14509":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":25,"cwes":26,"cpes":28,"technologies":94,"references":96,"score":100,"epss_score":101,"epss_percentile":102,"is_kev":103,"cisa_kev_date_added":104,"cisa_kev_due_date":104,"cisa_ssvc":105,"attack_mappings":111,"exploits":118},213907,"CVE-2017-14509","EUVD-2017-6010","An issue was discovered in SugarCRM before 7.7.2.3, 7.8.x before 7.8.2.2, and 7.9.x before 7.9.2.0 (and Sugar Community Edition 6.5.26). A remote file inclusion has been identified in the Connectors module allowing authenticated users to include remotely accessible system files via a module=CallRest&url= query string. Proper input validation has been added to mitigate this issue.","2017-09-17T21:29:00Z",{"cvss_v2.0":10,"cvss_v3.0":18},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":16,"confidentialityImpact":16},"2.0",6.5,"NETWORK","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL","LOW",{"scope":19,"version":20,"baseScore":21,"attackVector":13,"baseSeverity":22,"vectorString":23,"integrityImpact":22,"userInteraction":24,"attackComplexity":17,"availabilityImpact":22,"privilegesRequired":17,"confidentialityImpact":22},"UNCHANGED","3.0",8.8,"HIGH","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","NONE",true,[27],"CWE-20",[29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93],"cpe:2.3:a:sugarcrm:sugarcrm:6.5.26:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:7.9.0.1:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.18:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.24:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.20:*:*:*:community:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.5:*:*:*:community:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.18:*:*:*:community:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.3.1:*:*:*:community:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.7:*:*:*:community:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.9:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.12:*:*:*:community:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.5:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.17:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.12:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.10:*:*:*:community:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.14:*:*:*:community:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:7.8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.19:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.16:*:*:*:community:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.6:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.7:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.22:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:7.9.1.0:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.16:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:3.5.1:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.13:*:*:*:community:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.11:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.19:*:*:*:community:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.0:*:*:*:community:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.15:*:*:*:community:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.6:*:*:*:community:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.24:*:*:*:community:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:7.8.2.1:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:*:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.3:*:*:*:community:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.17:*:*:*:community:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:7.8.1.0:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.1:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.3:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.2:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.2:*:*:*:community:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.23:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.4:*:*:*:community:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.11:*:*:*:community:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.15:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.13:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.10:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.4:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:7.8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:7.8.2.0:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.25:*:*:*:community:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.14:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.22:*:*:*:community:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.26:*:*:*:community:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.8:*:*:*:community:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.20:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.21:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.21:*:*:*:community:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.8:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.1:*:*:*:community:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.25:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:7.7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:7.9.0.0:*:*:*:*:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.9:*:*:*:community:*:*:*","cpe:2.3:a:sugarcrm:sugarcrm:6.5.23:*:*:*:community:*:*:*",[95],"Sugarcrm Sugarcrm",[97,98,99],"https:\u002F\u002Fblog.ripstech.com\u002F2017\u002Fsugarcrm-security-diet-multiple-vulnerabilities\u002F","https:\u002F\u002Fsupport.sugarcrm.com\u002FResources\u002FSecurity\u002Fsugarcrm-sa-2017-007\u002F","https:\u002F\u002Fwww.synology.com\u002Fsupport\u002Fsecurity\u002FSynology_SA_17_53_SugarCRM",0.79,0.05766,0.93072,false,null,{"timestamp":104,"automatable":106,"tech_impact":107,"exploitation":108,"cisa_decision":109,"cisa_remediation_timeline":110},"no","partial","none",{},"FSU",[112],{"name":113,"source":114,"tactics":115,"technique_id":117},"Exploit Public-Facing Application","attack_vector",[116],"initial-access","T1190",[119],{"link":97}]