[ Vendor · 4 CVEs ]
Coupa
CVEs affecting Coupa published in the last 30 days, plus any Coupa CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-111038 | 4 Nov 2026 | CVSS 7.3 | Coupa Total Spend Management PlatformCSV formula injection vulnerability in the export functionality of the Coupa Supplier Portal SaaS platform. The vulnerability arises because certain… | |
| CVE-2026-111040 | 4 Nov 2026 | CVSS 5.1 | Coupa Total Spend Management PlatformThe platform allows persistent HTML injection into editable fields managed by TinyMCE. An authenticated attacker with low privileges can inject… | |
| CVE-2026-111036 | 4 Nov 2026 | CVSS 8.4 | Coupa Total Spend Management PlatformServer-side request forgery (SSRF) vulnerability in the Coupa Supplier Portal SaaS platform, specifically in the document conversion functionality… | |
| CVE-2026-111037 | 4 Nov 2026 | CVSS 5.1 | Coupa Total Spend Management PlatformA reflected Cross-Site Scripting (XSS) vulnerability in the Tenders module of the Coupa Supplier Portal SaaS platform. The vulnerability arises… |