https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2019-15950.htmlhttps://patchthecve.com/cve/CVE-2019-15950.htmlWed, 17 Jun 2026 02:21:24 +0000MEDIUM 6.1: The CRM Plugin before 4.2.4 for Redmine allows XSS via crafted vCard data.https://patchthecve.com/cve/CVE-2017-5966.htmlhttps://patchthecve.com/cve/CVE-2017-5966.htmlWed, 17 Jun 2026 01:21:31 +0000MEDIUM 4.9: Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to read arbitrary files via an absolute path traversal attack on sitecore/shell/download.aspx with the file parameter.https://patchthecve.com/cve/CVE-2017-5965.htmlhttps://patchthecve.com/cve/CVE-2017-5965.htmlWed, 17 Jun 2026 01:21:31 +0000MEDIUM 6.7: The package manager in Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to execute arbitrary ASP code by creating a ZIP archive in which a .asp file has a ..\ in its pathname, visiting sitecore/shell/applications/install/dialogs/Upload%20Package/UploadPackage2.aspx to upload th