Software Acquisition Guide Tool
Approved changes feed: RSS · Atom
cpe:2.3:a:cisa:software_acquisition_guide_tool:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Cisa (4ccdc51d-6086-51ca-85a4-77a140f6b0c5) |
|---|---|
| Product | Software Acquisition Guide Tool (6274d19c-04f7-56d6-b5d7-a289f6121712) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-67634 |
vulnerable | 2026-06-08 07:41:20.240011 |
Software Acquisition Guide Supplier Response Web Tool XSS
MEDIUM (4.4)
The CISA Software Acquisition Guide Supplier Response Web Tool before 2025-12-11 was vulnerable to cross-site scripting via text fields. If an attacker could convince a user to import a specially-crafted JSON file, the Tool would load JavaScript from the file into the page. The JavaScript would execute in the context of the user's browser when the user submits the page (clicks 'Next').
Published: 2025-12-12T20:36:25.597Z
Updated: 2026-01-08T18:13:27.307Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.