CISA

Records34All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

CISA records in CISA KEV

No CISA vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Software Acquisition Guide · all components

TI-2025-41377 CVE-2025-67634 · GHSA-5m87-3r8p-jp6j

MEDIUM 54

The CISA Software Acquisition Guide Supplier Response Web Tool before 2025-12-11 was vulnerable to cross-site scripting via text fields.

CVSS 4.0MEDIUM 4.6 Local No auth User interaction EPSS 0.0019 Published 2025-12-12 Fixed in 2025-12-11 CWE-79