Third Party Index

SugarCRM

sugarcrm.com

Subprocessors

None extracted.

Listed as a subprocessor by (1)

1 company
  • Humanforce humanforce.com - **Processing Purpose**: Sales automation workflow - **Type of Data**: Personal data for customers' primary contacts and customer metadata only. - **Processing duration**: For the duration of the agreement, unless otherwise mutually agreed. - **Modules Applicable**: WFM, HR, Talent, Benefits.; Sales

Security record

What public security catalogs list for SugarCRM, in their words.

Known exploited vulnerabilities

1 vulnerability in SugarCRM's software that CISA lists as exploited in the wild.

CVEProductVulnerabilityListed
CVE-2023-22952Multiple ProductsMultiple SugarCRM Products Remote Code Execution Vulnerability

Source: CISA Known Exploited Vulnerabilities catalog (evidence)

Service status

Jul 3: no incident reportedJul 4: no incident reportedJul 5: no incident reportedJul 6: no incident reportedJul 7: no incident reportedJul 8: no incident reportedJul 9: no incident reportedJul 10: 1 incident (1 major)Jul 11: no incident reportedJul 12: no incident reportedJul 13: no incident reportedJul 14: no incident reportedJul 15: 1 incident (1 major)Jul 16: 1 incident (1 major)Jul 17: no incident reportedJul 18: no incident reportedJul 19: no incident reportedJul 20: 1 incident (1 major)Jul 21: 1 incident (1 major)Jul 22: no incident reportedJul 23: no incident reportedJul 24: 1 incident (1 major)Jul 25: no incident reportedJul 26: no incident reportedJul 27: 1 incident (1 major)Jul 28: no incident reportedJul 29: no incident reportedJul 30: 1 incident (1 major)Jul 31: no incident reportedAug 1: no incident reportedAug 2: no incident reportedAug 3: no incident reportedAug 4: no incident reportedAug 5: no incident reportedAug 6: 1 incident (1 major)Aug 7: 1 incident (1 major)Aug 8: no incident reportedAug 9: 1 incident (1 major)Aug 10: 1 incident (1 major)Aug 11: no incident reportedAug 12: no incident reportedAug 13: no incident reportedAug 14: no incident reportedAug 15: no incident reportedAug 16: no incident reportedAug 17: no incident reportedAug 18: no incident reportedAug 19: no incident reportedAug 20: no incident reportedAug 21: no incident reportedAug 22: no incident reportedAug 23: no incident reportedAug 24: no incident reportedAug 25: no incident reportedAug 26: no incident reportedAug 27: no incident reportedAug 28: 1 incident (1 major)Aug 29: 1 incident (1 major)Aug 30: no incident reportedAug 31: 1 incident (1 major)Sep 1: 1 incident (1 major)Sep 2: no incident reportedSep 3: no incident reportedSep 4: no incident reportedSep 5: no incident reportedSep 6: no incident reportedSep 7: no incident reportedSep 8: no incident reportedSep 9: no incident reportedSep 10: no incident reportedSep 11: no incident reportedSep 12: no incident reportedSep 13: no incident reportedSep 14: no incident reportedSep 15: no incident reportedSep 16: no incident reportedSep 17: 1 incident (1 major)Sep 18: no incident reportedSep 19: no incident reportedSep 20: no incident reportedSep 21: 1 incident (1 major)Sep 22: no incident reportedSep 23: no incident reportedSep 24: no incident reportedSep 25: no incident reportedSep 26: no incident reportedSep 27: no incident reportedSep 28: no incident reportedSep 29: no incident reportedSep 30: no incident reported

90 days agotoday

  • 19 incidents in 90 days
  • 19 major or critical
  • 2 min typical time to resolve
  • 9 h 14 min longest major
BeganIncidentImpactLasted
Sugar Cloud Premium DE 02 is downmajor41 min
Sugar Market US and Sugar Market EU are downmajor9 min
Sugar Cloud US 13 is downmajor2 min
Sugar Cloud US 13 is downmajor2 min
Sugar Cloud US 13 is downmajor10 min
Sugar Cloud US 13 is downmajor1 min
Sugar Cloud US 04 is downmajor1 min
Sugar Market Mail App APAC is downmajor4 min

Incidents per month

0 5 10 Jul 2026: 10 incidents (10 major) · partial: our history begins Jul 1 · typical time to resolve 6 min Aug 2026: 7 incidents (7 major) · typical time to resolve 2 min Sep 2026: 3 incidents (3 major) · typical time to resolve 9 min Jul 2026Aug Sep

critical major minor no impact stated before or partly before our history

Components affected

ComponentIncidents
Sugar Cloud US 134
Sugar Cloud DE 022
Sugar Cloud US 022
Sugar Cloud US 042
Sugar Cloud US 122
Sugar Predict Global Login2
Sugar Cloud AU 011
Sugar Cloud DE 041

As SugarCRM's status page reports its own incidents (scheduled maintenance left out), read every few hours since (evidence)

Changes

None since tracking began.

Rating badge for SugarCRM's site

SugarCRM transparency rating

It updates with the rating.

<a href="https://thirdpartyindex.com/vendors/sugarcrm"><img src="https://thirdpartyindex.com/badge/sugarcrm.svg" alt="SugarCRM transparency rating on Third Party Index" height="20"></a>
[![SugarCRM transparency rating on Third Party Index](https://thirdpartyindex.com/badge/sugarcrm.svg)](https://thirdpartyindex.com/vendors/sugarcrm)