Epicor

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Epicor records in CISA KEV

No Epicor vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Epicor Procurement · all components

TI-2014-03535 CVE-2014-4313 · GHSA-xvxr-4f6g-g73v

LOW 37

SQL injection vulnerability in Epicor Procurement before 7.4 SP2 allows remote attackers to execute arbitrary SQL commands via the User field.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02164 Published 2014-10-10 No fix listed CWE-89