Coupa Coupa Total Spend Management Platform
2 CVEs affecting Coupa Coupa Total Spend Management Platform. Latest disclosed: 2026-11-04. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-111040 | | 2026-11-04 | The platform allows persistent HTML injection into editable fields managed by TinyMCE. An authenticated attacker with low privileges can inject unsanitised HTM… | |
CVE-2026-111038 | | 2026-11-04 | CSV formula injection vulnerability in the export functionality of the Coupa Supplier Portal SaaS platform. The vulnerability arises because certain user-contr… |