CVE Tools
Track your stack

Epicor

3 CVEs tracked since 2014. Since Oct 2014, none of them reached CISA KEV.

Epicor CVEs per month

Oct 2014 to Nov 2014. Point at a month, or focus the strip and use the arrow keys.
Epicor CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2014-1020
2014-1110

Products

The products that kept showing up in Epicor's monthly top three, with their CVEs summed over those months.

  1. Epicor Enterprise22 months
  2. Epicor Procurement11 month

Latest CVEs

The 5 most recently published vulnerabilities affecting Epicor.

  1. CVE-2025-22953A SQL injection vulnerability exists in Epicor HCM 2021 1.9, with patches available: 5.16.0.1033/HCM2022, 5.17.0.1146/HCM2023, and 5.18.0.573/HCM2024. The injection is specifically in the filter pa...9.8
  2. CVE-2015-2210The help window in Epicor CRS Retail Store before 3.2.03.01.008 allows local users to execute arbitrary code by injecting Javascript into the window source to create a button that spawns a command ...7.8
  3. CVE-2014-4311Epicor Enterprise 7.4 before FS74SP6_HotfixTL054181 allows attackers to obtain the (1) Database Connection and (2) E-mail Connection passwords by reading HTML source code of the database connection...5.0
  4. CVE-2014-4313SQL injection vulnerability in Epicor Procurement before 7.4 SP2 allows remote attackers to execute arbitrary SQL commands via the User field.7.5
  5. CVE-2014-4312Multiple cross-site scripting (XSS) vulnerabilities in Epicor Enterprise 7.4 before FS74SP6_HotfixTL054181 allow remote attackers to inject arbitrary web script or HTML via the (1) Notes section to...4.3

The record

Peak rank
#94 in Oct 2014
Busiest month shown
Oct 2014, 2 CVEs
Months with a KEV entry
0 since Oct 2014
Monthly snapshots
2 since 2014
Epicor's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store