Known Vulnerabilities for products from Epicor
Listed below are 4 of the newest known vulnerabilities associated with the vendor "Epicor".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2015-2210 json | The help window in Epicor CRS Retail Store before 3.2.03.01.008 allows local users to execute arbitrary code by injecting Jav... | 7.8 - HIGH | 2017-09-06 | 2018-10-09 |
| CVE-2014-4313 json | SQL injection vulnerability in Epicor Procurement before 7.4 SP2 allows remote attackers to execute arbitrary SQL commands vi... | Not Provided | 2014-10-10 | 2026-05-06 |
| CVE-2014-4312 json | Multiple cross-site scripting (XSS) vulnerabilities in Epicor Enterprise 7.4 before FS74SP6_HotfixTL054181 allow remote attac... | Not Provided | 2014-10-10 | 2026-05-06 |
| CVE-2014-4311 json | Epicor Enterprise 7.4 before FS74SP6_HotfixTL054181 allows attackers to obtain the (1) Database Connection and (2) E-mail Con... | Not Provided | 2014-11-04 | 2026-05-06 |
Known software with vulnerabilities from Epicor
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Epicor | Crs Retail Store | 3.2.03.01.008 |