Q: Is CVE-2012-0694 being actively exploited?

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 67%.

Q: What products does CVE-2012-0694 affect?

Tracked products affected include SugarCRM. Check the version you run to see whether it is affected.

Q: How do I fix CVE-2012-0694?

Apply the vendor fix promptly. Upgrade affected products to a fixed version.

Question 1

What is CVE-2012-0694?

Accepted Answer

CVE-2012-0694 is a critical-severity software vulnerability (Improper input validation) with a CVSS score of 9.8. SugarCRM CE <= 6.3.1 contains scripts that use "unserialize()" with user controlled input which allows remote attackers to execute arbitrary PHP code.

Question 2

Is CVE-2012-0694 being actively exploited?

Accepted Answer

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 67%.

Question 3

What products does CVE-2012-0694 affect?

Accepted Answer

Tracked products affected include SugarCRM. Check the version you run to see whether it is affected.

Question 4

How do I fix CVE-2012-0694?

Accepted Answer

Apply the vendor fix promptly. Upgrade affected products to a fixed version.

CVE-2012-0694

Summary

Impact & exploitability

Affected products we track (1)

Recommendation

Additional information