Epicor

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Epicor records in CISA KEV

No Epicor vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Epicor Enterprise 2 records LOW Crs Retail Store 1 record LOW Epicor Procurement 1 record LOW Human Capital Management 1 record MEDIUM

Records

1 record in Human Capital Management · all components

TI-2025-16797 CVE-2025-22953 · GHSA-q87j-52xg-48j5

A SQL injection vulnerability exists in Epicor HCM 2021 1.9, with patches available…

MEDIUM 53

A SQL injection vulnerability exists in Epicor HCM 2021 1.9, with patches available: 5.16.0.1033/HCM2022, 5.17.0.1146/HCM2023, and 5.18.0.573/HCM2024.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01834 Published 2025-03-28 No fix listed CWE-89

Open these records in search →

Critical	1
High	2
Medium	2
Low	0
No CVSS	0