CVE Intelligence

Cisa Software Acquisition Guide vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Cisa Software Acquisition Guide: 1 record(s), with affected versions and fixes.
cpe:2.3:a:cisa:software_acquisition_guide

CVE-2025-67634 Medium · 6.1 CWE-79 Dec 12, 2025
Software Acquisition Guide Supplier Response Web Tool XSS
The CISA Software Acquisition Guide Supplier Response Web Tool before 2025-12-11 was vulnerable to cross-site scripting via text fields. If an attacker could convince a user to import a specially-crafted JSON file, the Tool would load JavaScript from the file into the page. The JavaScript would execute in the context of the user's browser when the user submits the page (clicks 'Next').