Epicor

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Epicor records in CISA KEV

No Epicor vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Epicor Enterprise 2 records LOW Crs Retail Store 1 record LOW Epicor Procurement 1 record LOW Human Capital Management 1 record MEDIUM

Records

1 record in Crs Retail Store · all components

TI-2015-01970 CVE-2015-2210 · GHSA-cpw6-5jfx-2w4c

The help window in Epicor CRS Retail Store before 3.2.03.01.008 allows local users to…

LOW 35

The help window in Epicor CRS Retail Store before 3.2.03.01.008 allows local users to execute arbitrary code by injecting Javascript into the window source to create a button that spawns a command shell.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00632 Published 2017-09-06 No fix listed CWE-77

Open these records in search →

Critical	1
High	2
Medium	2
Low	0
No CVSS	0