Contract Lifecycle Management Security Vulnerabilities and Issues — Contract Lifecycle Management CVE List

Lucene search

DetermineContract Lifecycle Management

3 matches found

CVE•added 2020/01/05 11:15 p.m.•68 views

CVE-2019-20155

An issue was discovered in report_edit.jsp in Determine (formerly Selectica) Contract Lifecycle Management (CLM) v5.4. Any authenticated user may execute Groovy code when generating a report, resulting in arbitrary code execution on the underlying server.

9CVSS8.8AI score0.00932EPSS

CVE•added 2020/01/05 11:15 p.m.•63 views

CVE-2019-20153

An issue was discovered in Determine (formerly Selectica) Contract Lifecycle Management (CLM) in v5.4. An XML external entity (XXE) vulnerability in the upload definition feature in definition_upload_attach.jsp allows authenticated remote attackers to read arbitrary files (including configuration f...

4.9CVSS5.1AI score0.0076EPSS

CVE•added 2020/01/05 11:15 p.m.•56 views

CVE-2019-20154

An issue was discovered in Determine (formerly Selectica) Contract Lifecycle Management (CLM) v5.4. A cross-site scripting (XSS) vulnerability in multiple getchart.jsp parameters allows remote attackers to inject arbitrary web script or HTML.

6.1CVSS5.9AI score0.00313EPSS