CVE-2026-111037 | Coupa Total Spend Management Platform up to 3/10 Tenders list_item_function cross site scripting

November 4, 2026 Yanac

A vulnerability labeled as problematic has been found in Coupa Total Spend Management Platform up to 3/10. This issue affects some unknown processing of the component Tenders Module. The manipulation of the argument list_item_function results in cross site scripting.

This vulnerability was named CVE-2026-111037. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More