CVE Intelligence

Fit2cloud Cordys Crm vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Fit2cloud Cordys Crm: 1 record(s), with affected versions and fixes.
cpe:2.3:a:fit2cloud:cordys_crm

CVE-2025-70981 Critical · 9.8 CWE-89 Feb 12, 2026
SQL Injection in Fit2cloud Cordys Crm
CordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface (/user/list) via the departmentIds parameter.