CVE-2009-3257

LOW · CVSS 3.6 EPSS 0.86%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-09-18 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2009-3257

Severity

LOW

CVSS

3.6

EPSS

0.86%

Original NVD Description

vtiger CRM before 5.1.0 allows remote authenticated users to bypass the permissions on the (1) Account Billing Address and (2) Shipping Address fields in a profile by creating a Sales Order (SO) associated with that profile.