Vulnerabilities (CVE)

Filtered by vendor Determine Subscribe
Filtered by product Contract Lifecycle Management
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-20155 1 Determine 1 Contract Lifecycle Management 2024-02-28 9.0 HIGH 8.8 HIGH
An issue was discovered in report_edit.jsp in Determine (formerly Selectica) Contract Lifecycle Management (CLM) v5.4. Any authenticated user may execute Groovy code when generating a report, resulting in arbitrary code execution on the underlying server.
CVE-2019-20154 1 Determine 1 Contract Lifecycle Management 2024-02-28 4.3 MEDIUM 6.1 MEDIUM
An issue was discovered in Determine (formerly Selectica) Contract Lifecycle Management (CLM) v5.4. A cross-site scripting (XSS) vulnerability in multiple getchart.jsp parameters allows remote attackers to inject arbitrary web script or HTML.
CVE-2019-20153 1 Determine 1 Contract Lifecycle Management 2024-02-28 4.0 MEDIUM 4.9 MEDIUM
An issue was discovered in Determine (formerly Selectica) Contract Lifecycle Management (CLM) in v5.4. An XML external entity (XXE) vulnerability in the upload definition feature in definition_upload_attach.jsp allows authenticated remote attackers to read arbitrary files (including configuration files containing administrative credentials).