MI
Vendor
MicroPyramid
6
CVEs
0
On KEV
4
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-110595 | BO BottleCRM MicroPyramid | 4.3 | Oct 14 | BottleCRM 0.45 through 1.14.5 Memory Exhaustion via Contact and Case CSV Import |
| CVE-2026-110594 | BO BottleCRM MicroPyramid | 4.9 | Oct 14 | BottleCRM 0.43 through 1.14.5 ReDoS via Case Routing Rule Regex |
| CVE-2026-110593 | BO BottleCRM MicroPyramid | 5.4 | Oct 14 | BottleCRM through 1.14.5 Server-Side Template Injection via Account Email create_mail |
| CVE-2026-110592 | BO BottleCRM MicroPyramid | 3.5 | Oct 14 | BottleCRM 0.30 through 1.14.5 HTML Injection via Custom Invoice PDF Template |
| CVE-2019-11457 | DC Django Crm Micropyramid | 8.8 | Aug 27 | Multiple CSRF issues exist in MicroPyramid Django CRM 0.2.1 via /change-password-by-admin/, /api/settings/add/, /cases/create/, /change-password-by-admin/, /comment/add/,… |
| CVE-2018-16552 | DC Django Crm Micropyramid | 8.8 | Sep 5 | MicroPyramid Django-CRM 0.2 allows CSRF for /users/create/, /users/##/edit/, and /accounts/##/delete/ URIs |