← Back

Software Acquisition Guide

software_acquisition_guide

Vendor: Cisa • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-67634
1Cisa
1Software Acquisition Guide
Jun 17, 2026
Dec 12, 2025
4.6 MEDIUM· v4
6.1 MEDIUM· v3
N/A· v2
The CISA Software Acquisition Guide Supplier Response Web Tool before 2025-12-11 was vulnerable to cross-site scripting via text fields. If an attacker could convince a user to import a specially-crafted JSON file, the T...Show more
The CISA Software Acquisition Guide Supplier Response Web Tool before 2025-12-11 was vulnerable to cross-site scripting via text fields. If an attacker could convince a user to import a specially-crafted JSON file, the Tool would load JavaScript from the file into the page. The JavaScript would execute in the context of the user's browser when the user submits the page (clicks 'Next').Show less