Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Coupa Clear all filters
TI-2026-85005 CVE-2026-111037 · GHSA-jfgq-g3fh-wr9x

Reflected cross-site scripting in Coupa Total Spend Management

Priority LOW 24

A reflected Cross-Site Scripting (XSS) vulnerability in the Tenders module of the Coupa Supplier Portal SaaS platform.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00463 Published 2026-11-04 Fixed in 04/11/2026 CWE-79
TI-2026-85004 CVE-2026-111036 · GHSA-5rf7-5f5j-9m5j

Server-side request forgery in Coupa Total Spend Management Platform

Priority LOW 37

Server-side request forgery (SSRF) vulnerability in the Coupa Supplier Portal SaaS platform, specifically in the document conversion functionality available in the ‘Contracts > Templates’ section.

CVSS 4.0HIGH 8.4 Network High privileges No interaction EPSS 0.00413 Published 2026-11-04 Fixed in 04/11/2024 CWE-918