Filtered by vendor Determine Subscriptions
Filtered by product Contract Lifecycle Management Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2019-20155 1 Determine 1 Contract Lifecycle Management 2024-11-21 8.8 High
An issue was discovered in report_edit.jsp in Determine (formerly Selectica) Contract Lifecycle Management (CLM) v5.4. Any authenticated user may execute Groovy code when generating a report, resulting in arbitrary code execution on the underlying server.
CVE-2019-20154 1 Determine 1 Contract Lifecycle Management 2024-11-21 6.1 Medium
An issue was discovered in Determine (formerly Selectica) Contract Lifecycle Management (CLM) v5.4. A cross-site scripting (XSS) vulnerability in multiple getchart.jsp parameters allows remote attackers to inject arbitrary web script or HTML.
CVE-2019-20153 1 Determine 1 Contract Lifecycle Management 2024-11-21 4.9 Medium
An issue was discovered in Determine (formerly Selectica) Contract Lifecycle Management (CLM) in v5.4. An XML external entity (XXE) vulnerability in the upload definition feature in definition_upload_attach.jsp allows authenticated remote attackers to read arbitrary files (including configuration files containing administrative credentials).