Coupa vulnerabilities
We track 2 vulnerabilities in Coupa products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 4, 2026.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest Coupa vulnerabilities
- 7.3 High severity
Coupa Total Spend Management Platform: Improper Neutralization of Formula Elements in a CSV File
CSV formula injection vulnerability in the export functionality of the Coupa Supplier Portal SaaS platform. The vulnerability arises because certain user-controlled data, such as event names or templates within the Tenders module, are not properly validated or
- 8.4 High severity
Coupa Total Spend Management Platform: Server-Side Request Forgery
Server-side request forgery (SSRF) vulnerability in the Coupa Supplier Portal SaaS platform, specifically in the document conversion functionality available in the ‘Contracts > Templates’ section. The vulnerability is due to insufficient validation of referenc