← All advisories

Unrated severityNVD Advisory· Published Oct 10, 2014· Updated Jun 17, 2026

CVE-2014-4313

CVE-2014-4313

Description

SQL injection vulnerability in Epicor Procurement before 7.4 SP2 allows remote attackers to execute arbitrary SQL commands via the User field.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Epicor/Epicor Procurement2 versions
cpe:2.3:a:epicor:epicor_procurement:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:epicor:epicor_procurement:*:*:*:*:*:*:*:*range: <=7.4
- (no CPE)range: <7.4 SP2

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.