Back to Database
Status published
Critical
CVE-2022-50589
SuiteCRM < 7.12.6 SQL Injection via 'export' Functionality
Vulnerability Description
SuiteCRM versions prior to 7.12.6 contain a SQL injection vulnerability within the processing of the ‘uid’ parameter within the ‘export’ functionality. Successful exploitation allows remote unauthenticated attackers to ultimately execute arbitrary code.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-50589
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Exodus Intelligence
References
More from SuiteCRM
View All →CVE-2025-64493
SuiteCRM is Vulnerable to Authenticated Blind SQL Injection via GraphQL
Medium
6.5
CVE-2025-64492
SuiteCRM is Vulnerable to Authenticated Time Based Blind SQL Injection
High
8.8
CVE-2025-64491
SuiteCRM is vulnerable to unauthenticated reflected XSS through its Login page
Medium
6.1
CVE-2025-64490
SuiteCRM's Inconsistent RBAC Enforcement Enables Access Control Bypass
High
8.3
CVE-2025-64489
SuiteCRM: Privilege Escalation via Improper Session Invalidation and Inactive User Bypass
High
8.3
Affected Vendor
SuiteCRM
View all reports →Affected Software
SuiteCRM
Vulnerable Versions:
0
Timeline
Official Publish:
November 6th, 2025
Last Modified:
July 15th, 2026
Added to House:
July 21st, 2026