Skip to content
OpenAdvisories

Product · CISA

Software Acquisition Guide Tool

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.4
    CVE-2025-67634

    Software Acquisition Guide Supplier Response Web Tool XSS

    The CISA Software Acquisition Guide Supplier Response Web Tool before 2025-12-11 was vulnerable to cross-site scripting via text fields. If an attacker could convince a user to import a specially-crafted JSON file, the Tool would load JavaScript from the file…

    CISA Software Acquisition Guide Tool