C
Vendor security profile
crmeb
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs9
Critical0
CISA KEV0
Public exploit0
Patch rate—
Avg. CVSS—
12-month vulnerability rate
CVE KEV
CVE severity distribution
9toplam CVE
Uncertain9 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
9Unknown
Latest vulnerabilities
7.1
CVE-2026-111359CRMEB 5.6.1 through 6.0.0 IDOR via giftDetail and receiveGift
Patch status unknownEPSS %0
8.7
CVE-2026-85212CRMEB through 6.0.0 Missing Authorization via Inert verifyAuth Role Check
Patch status unknownEPSS %1
5.3
CVE-2026-85177CRMEB through 6.0.0 Unauthorized Message Modification via edit_message
Patch status unknownEPSS %0
7.2
CVE-2025-15443SQL injection in Crmeb
Patch status unknown Public Exploits:2EPSS %0
7.2
CVE-2025-15442SQL injection in Crmeb
Patch status unknown Public Exploits:2EPSS %0
8.1
CVE-2024-28714SQL injection in Crmeb Java
Patch status unknown Public Exploits:2EPSS %1
9.8
CVE-2023-30185Unrestricted file upload in Crmeb
Patch status unknown Public Exploits:1EPSS %1
9.8
CVE-2020-25466Server-side request forgery in Crmeb
Patch status unknown Public Exploits:1EPSS %3